Large-Scale Fraudulent Operations on Android
![Large-Scale Fraudulent Operations on Android]({"desktop":"assets\/images\/cache\/assets\/images\/discovery\/34-1-998x499.jpg","desktop2x":"assets\/images\/cache\/assets\/images\/discovery\/34-1-1996x998.jpg","tablet":"assets\/images\/cache\/assets\/images\/discovery\/34-1-1150x575.jpg","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/34-1-2298x1105.jpg","mobile":"assets\/images\/cache\/assets\/images\/discovery\/34-1-740x370.jpg","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/34-1-1478x739.jpg"})
According to recent data, applications were discovered that loaded out-of-context ads onto users’ screens, making them difficult to remove.
Google has already removed these applications from the Play Store; however, at the peak of the malware’s activity, the number of requests exceeded 1.2 billion per day. Most of the infected applications linked to the IconAds campaign were distributed in Brazil, Mexico, and the United States. Some of them disguised themselves as Google Play or Google services to mislead users.
Although the applications have already been blocked, experts expect new variations of this threat in the near future.
Other schemes were also discovered in parallel. One of them was named Kaleidoscope. As part of this attack, attackers created two versions of the same application: a legitimate one for Google Play and a malicious copy for third-party sources. The malicious version launched intrusive ads and generated profit for fraudsters through fake impressions. This scheme was most widespread in Latin America, Turkey, Egypt, and India between December 2024 and May 2025. A significant part of the financial benefit from these attacks was associated with the company Saturn, which offers tools for ad and video monetization.
![Illustration of data theft through malicious mobile applications.]({"desktop":"assets\/images\/cache\/assets\/images\/discovery\/34-2-998x666.png","desktop2x":"assets\/images\/cache\/assets\/images\/discovery\/34-2-1976x1318.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/34-2-1050x700.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/34-2-2100x1400.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/34-2-740x494.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/34-2-1478x986.png"})
Another dangerous trend was the use of NFC technology in the malicious applications NGate and SuperCard X. Through infected smartphones, attackers were able to transmit victims’ bank card signals and thus withdraw money remotely. In addition, the Qwizzserial campaign became more active, distributing fake banking applications through Telegram by disguising them as government services. As a result of this malware, two-factor authentication codes, banking data, and other confidential information were stolen, causing damages of tens of thousands of dollars.
The scale of these attacks indicates that cybersecurity today must be an integral part of the activities of any company and every user. Regular checks of digital protection are a critical condition for countering malware and ensuring data security.
![TOP 5 Largest Cryptocurrency Hacks in History]({"desktop":"assets\/images\/cache\/assets\/images\/discovery\/1-1-554x277.png","desktop2x":"assets\/images\/cache\/assets\/images\/discovery\/1-1-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/1-1-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/1-1-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/1-1-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/1-1-1118x559.png"})
![Datami at the Barcelona Cybersecurity Congress 2025: New Horizons in Cybersecurity]({"desktop":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-554x277.jpg","desktop2x":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-1106x553.jpg","tablet":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-380x190.jpg","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-758x379.jpg","mobile":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-560x280.jpg","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/10-1_1-16-9-1118x559.jpg"})
![Top 10 Cyberattacks That Brought Global Corporations to a Halt]({"desktop":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-554x277.png","desktop2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-6-1-1-1118x559.png"})
![Antivirus Is Not a Shield: Why You Can’t Do Without Pentesting]({"desktop":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-554x277.png","desktop2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/ds-16-1-1118x559.png"})
![Over 480,000 Catholic Health Patients Affected by Personal Data Breach]({"desktop":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-554x277.png","desktop2x":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/2-3-4-1118x559.png"})
![Why Your Smartphone Is at Risk: 5 Common Myths About Mobile Security]({"desktop":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-554x277.png","desktop2x":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-1106x553.png","tablet":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-380x190.png","tablet2x":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-758x379.png","mobile":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-560x280.png","mobile2x":"assets\/images\/cache\/assets\/images\/discovery\/5-2-16-9-1118x559.png"})