Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads

## Executive Summary Researchers identified a large-scale fraud campaign (CallPhantom) on Google Play consisting of 28 Android apps that promised call/SMS/WhatsApp histories but delivered fabricated data after charging subscription fees (over 7.3M downloads); a related disclosure highlights an Indonesia-targeting fraud (GoldFactory) that used social engineering, phishing, malicious APK sideloading, and Android malware (Gigabud RAT, MMRat, Taotie) to steal data and siphon roughly $2M from victims.