Microsoft warns of dangers from toll fraud malware on Android devices

According to a Microsoft Security post, users of the operating system are being attacked by malicious software that purchases premium subscription services that they did not want.

In a report from Microsoft researchers, the pair detailed the evolution of toll fraud and how it attacks users and their devices. Toll fraud is a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent, and is one of the most prevalent types ofAndroid malware.

Consumers can add a charge to their phone bill if they subscribe to paid content through the Wireless Application Protocol. The attack relies on a cellular network to do the dirty work, so it's possible that you'll be disconnected from the internet or forced onto it. While connecting to the cellular network, the malicious software will hide any one-time passwords you send to verify your identity. Targets are kept in the dark so that they don't sign up.

Researchers warn of the danger posed by the evolution of toll fraud software. Mobile bill charges can be a result of the malicious software. The affected devices have increased risk because they can achieve a high number of installations before a single variant can be taken down.

How does this malware even end up on my device in the first place?

This type of attack starts when a user clicks on a link in an app that is not real. Personalization, editor, communication, photography, and tools are some of the categories popular in the app store. According to the researchers, these apps will ask for things that don't make sense for what they're doing.

The purpose is to get as many people to download the app. Attackers will try to keep their app on the Play Store, according to Valsamaras and Shin Jung.

1. Clean versions should be uploaded until the application has enough installs.

2. The application should be updated to load malicious codes.

3. It is necessary to separate the malicious flow from the uploaded application.

What can I do to protect against malware?

According to Valsamaras and Shin Jung, there are some characteristics one can look for when shopping for an app in the play store. Some apps will ask for too much permission for programs that don't need it. Other characteristics to be on the lookout for are apps with similarUIs or icons, developer profiles that look fake, and if the app has a lot of negative reviews.

If you believe you've downloaded a potentially harmful app, there are a number of signs to look out for.

Side loading apps that you can't get officially in the Play Store can increase the risk of infections. They found that toll fraud was the second most installed malicious application in the first quarter of the year.

Most of the installations came from India, Russia, Mexico, Indonesia, and Turkey, according to a report by the internet giant.