Vaporized: The Android Ad Fraud Scheme That Duped 60 Million Users
Security researchers have uncovered the Vapor ad fraud scheme, where malicious Android apps on Google Play amassed over 60 million downloads. Masquerading as useful apps, they later turned into ad generators, inundating users with interstitial ads. These apps also attempted to collect user credentials, making them a double threat.
Hot Take:
Oh, the irony of an ad fraud scheme called “Vapor” that practically vanished into thin air—along with user patience and phone functionality! With Google Play becoming the unwitting accomplice, it seems these malicious apps were more invisible than a ninja at a blackout party. Who knew your health and fitness app could be this hazardous? Time to get your scam-dodging sneakers on, folks!
Key Points:
- Vapor campaign involved 331 malicious apps with over 60 million downloads.
- Apps disguised as utility, health, and lifestyle tools were updated to show intrusive ads.
- Some apps collected user credentials and credit card data through phishing.
- Google removed the apps after reports from IAS and Bitdefender.
- Despite removal, 15 apps remained available as of early March 2025.
Already a member? Log in here