Malicious ad tech actor VexTrio Viper develops fake apps that mimic useful services on major app stores to defraud users and generate revenue through subscriptions and ads. These operations are part of a larger, sophisticated criminal enterprise involved in ad fraud, traffic redirection, and scam networks leveraging compromised sites and cloaking techniques. #VexTrioViper #MaliciousAdTech
Keypoints
- VexTrio Viper creates fake apps on Apple and Google Play stores pretending to be legitimate tools.
- Users are tricked into subscribing, often incurring repeated charges and difficulty in uninstalling.
- The enterprise operates through interconnected companies and traffic distribution services (TDSes) dating back to 2015.
- They control both the affiliate networks and advertising platforms to promote scams and spread malicious content.
- Advanced cloaking and smartlink techniques are used to disguise malicious landing pages and evade detection.
Read More: https://thehackernews.com/2025/08/fake-vpn-and-spam-blocker-apps-tied-to.html