These fake fleeceware apps have been downloaded over a billion times
Fleeceware apps are increasingly targeting children through social media
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
The cybersecurity firmAvasthas discovered over 200 newfleeceware applicationsfor iOS and Android on theAppleApp Store and theGoogle Play Store.
So far these apps have been downloaded approximately 1bn times and have accrued over $400m in revenue. While Avast has reported these fleeceware apps for review to both Apple and Google, the company has also put together afull listso that users can be aware of them and avoid downloading them onto their devices.
This new batch of fleeceware apps tries to lure in unsuspecting users with the promise of a free 3-day trial. However, once the trial is over, users are charged a recurring subscription fee even if they have deleted these apps until theycancel the subscriptionin their device’s app subscription settings.
To make matters worse, these fleeceware apps are actively advertised on a variety of major social networks including Facebook, Instagram, Snapchat and evenTikTok. One of the apps in question offers a short free trial followed by a $66 per week subscription which could potentially cost a victim $3,432 per year unless they cancel it.
Fleeceware apps
Avast researchers first discovered these new Android fleeceware apps using the company’s mobile threat intelligence platformapklab.io. They then expanded their investigation to the Apple App Store where they found even more fleeceware.
Threat analyst at Avast Jakub Vávra provided further insight on the types of apps used in fleeceware campaigns in ablog post, saying:
“The fleeceware applications we’ve discovered consist predominantly of musical instrument apps, palm readers, image editors, camera filters, fortune tellers, QR code and PDF readers, and ‘slime simulators’. While the applications generally fulfil their intended purpose, it is unlikely that a user would knowingly want to pay such a significant recurring fee for these applications, especially when there are cheaper or even free alternatives on the market.”
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Vávra also noted that a big part of the fleeceware strategy is to target younger consumers on social networks with the promise of ‘free installation’ or ‘free download’. However, by the time their parents notice the weekly payments, the fleeceware may have already cost them significant amounts of money.
To avoid falling victim to fleeceware, Avast recommends that users exercise caution with free trials that last less than a week, be skeptical of viral advertisements for apps, read the small print when installing new apps and secure their payments behind either astrong passwordor biometric check.
After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.
A new form of macOS malware is being used by devious North Korean hackers
Scammers are using fake copyright infringement claims to hack businesses
This super-cheap HP Victus 15 gaming laptop just dropped to its lowest price yet
