Researchers uncovered 28 fraudulent Android apps on Google Play that claimed to provide call, SMS, and WhatsApp history for any phone number, but instead charged users for fake data and financial loss. The campaign, named CallPhantom, targeted Android users in India and the Asia-Pacific region and used deceptive developers, subscription traps, and payment methods to mislead victims. #CallPhantom #GooglePlay #ESET #IndianGovin
Keypoints
- 28 fake Android apps on Google Play claimed to reveal call history for any number.
- The apps collected over 7.3 million downloads before removal.
- ESET named the campaign CallPhantom and linked it to Android users in India and APAC.
- Some apps used the fake developer name “Indian gov.in” to appear trustworthy.
- Group-IB reported a separate fraud campaign tied to GoldFactory, Gigabud RAT, MMRat, and Taotie in Indonesia.
Read More: https://thehackernews.com/2026/05/fake-call-history-apps-stole-payments.html