Cybersecurity experts have revealed information about a new malvertising and ad fraud scheme called Trapdoor that targets users of Android devices.
According to HUMAN’s Satori Threat Intelligence and Research Team, the activity involved 183 threat actor-owned command-and-control (C2) domains and 455 malicious Android apps, transforming the infrastructure into a multi-stage fraud pipeline.
In a report shared with The Hacker News, researchers Louisa Abel, Ryan Joye, João Marques, João Santos, and Adam Sell described how users unintentionally download a threat actor-owned program, which is typically a utility-style app like a PDF player or device cleansing tool.
These apps set off malvertising operations that force users to download more apps operated by threat actors. The secondary apps request advertising, load HTML5 URLs owned by threat actors read more about Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.