Premium Deception Android Malware Campaign Subscription Fraud | MSSP Advisory

The Premium Deception campaign distributed over 250 malicious Android apps through official app stores that silently enrolled victims in premium subscription services without consent. These apps bypassed Google Play Protect defenses and used social engineering tactics to extract payment information while appearing as legitimate applications. The malware operated by automatically subscribing users to costly services and hiding subscription confirmations.

Your clients with BYOD policies face direct financial losses from employees downloading these apps, plus potential credential harvesting that could lead to corporate account compromise. Many MSPs managing mobile device policies have not addressed app store threats adequately, leaving clients exposed to both subscription fraud and potential data exfiltration through compromised personal devices accessing corporate resources.

📬