Smartphone owners using the Android operating system have been urged to watch out for a new serious threat that could "hit their pockets" with an unexpected bill. Security experts from the Avast team say they have discovered a new tactic that deceives Android users, costing them hundreds of pounds each year.
The scam, named SMSFactory, begins with simple notifications and alerts that appear on the screen, claiming to provide the user with free access to premium games, trending movies, and adult films. In the deception, the device owner is prompted to download an app that supposedly grants access to content without requiring any credit or bank card details.
All of this seems very tempting, but there are no free movies or games. Instead, the app starts to exploit the phone while in use, and can send text messages to premium-rate phone numbers without the user knowing. In fact, the app can completely disappear from view and even rename itself, making it almost impossible to locate and delete.
Avast states that if the app remains undetected, it has the potential to charge over $320 for every year it stays on the phone. Due to the nature of the malware, users might not be aware of the financial damage until they receive their phone bill.
Although the fake app is not available on the Google Play Store, that has not stopped its spread. Avast has reported preventing 165,000 users from falling victim to the scam, indicating that many have already succumbed to the attack.
It has been spotted in areas including the UK, the US, and Europe, although its prime targets appear to be in Russia, Brazil, Argentina, and Turkey. Avast emphasizes the importance of Android users staying vigilant and avoiding downloading apps from unofficial stores unless they are 100% sure they are safe to install. It is also advisable to disable or limit premium SMS features with the network being used, as this would stop unauthorized charges from appearing.
