NewsDark Reading
Fake Android Apps Commit Carrier Billing Fraud for Premium Services
Teaser from the source
The disguised apps use WebView automation, JavaScript injection, and OTP interception to avoid detection and complete fraudulent subscriptions.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on Android
Other advisories
- MediumCVE-2026-127209Xiaomi Mi Browser Android Application (com.mi.globalbrowser) before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity…
- MediumCVE-2026-126850Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer pro…
- HighCVE-2026-126915Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer proces…
- HighCVE-2026-126861Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr…
- HighCVE-2026-126862Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a local attacker to bypass web origin policy via a co-install…
- CriticalCVE-2026-126846Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr…
- HighCVE-2026-116633Lenovo Idea Tab Pro TB373FU: ungeschützt exportierte Android-Komponenten
- HighCVE-2026-116633Lenovo Idea Tab Pro TB373FU: ungeschützt exportierte Android-Komponenten
Other news entries
- Google Android Pixel: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Custom-ROM-Hürde beseitigt: GrapheneOS für Pixel 11 kommtNewsheise Security
- Researchers pwn automakers’ Android apps to remotely unlock cars, honk hornsNewsThe Register — Security
- Kein Patch verfügbar: Gefährliche Android-Lücke kann Smartphones unbrauchbar machenNewsGolem.de — Security
- NCSC-2026-0467 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android en Samsung MobileNewsNCSC-NL
- Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering HolesNewsSecurityWeek
- GhostMap Android flaw lets malicious app trigger persistent boot loopNewsBleepingComputer
- Hackers exploited iOS and Android flaws to infect phonesNewsArs Technica — Security
Source: https://www.darkreading.com/mobile-security/fake-android-apps-carrier-billing-fraud
ID