CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Fake call logs, real payments: How CallPhantom tricks Android users

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 6131

As cited

Copy frozen at (site build).

threat intel

Fake call logs, real payments: How CallPhantom tricks Android users

ESET researchers identified fraudulent applications on Google Play that purported to display call history for any phone number and accumulated over seven million downloads before removal. These CallPhantom apps exploited user trust to execute financial fraud schemes. The malicious software demonstrates the persistence of deceptive apps evading platform security measures.

Why it matters: Android users who downloaded these apps face financial theft and data exposure; practitioners should review app vetting processes and user security guidance, as legitimate-seeming utilities remain a primary infection vector on major platforms.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Fake call logs, real payments: How CallPhantom tricks Android users

ESET researchers identified fraudulent applications on Google Play that purported to display call history for any phone number and accumulated over seven million downloads before removal. These CallPhantom apps exploited user trust to execute financial fraud schemes. The malicious software demonstrates the persistence of deceptive apps evading platform security measures.

Why it matters: Android users who downloaded these apps face financial theft and data exposure; practitioners should review app vetting processes and user security guidance, as legitimate-seeming utilities remain a primary infection vector on major platforms.

VendorsGoogle
Actorsplay
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary