Security2 hSeptember 30, 2026, 10:00

CERT Polska exposes Android toll fraud campaign run through Facebook ads

CERT Polska recorded 1,235 Meta ad records under 74 profile names promoting 29 Google Play apps. Seventeen apps were linked to a single operation whose hidden four-stage chain charged victims' mobile accounts.

DEV Community

Open source

CERT Polska exposes Android toll fraud campaign run through Facebook ads

1,235 Meta ads under 74 profiles promoted 29 Google Play apps
17 apps tied to one operation via 852 ads and 60 profiles
Hidden four-stage chain loaded DEX in memory and charged mobile accounts
Google removed Messenger Pro on 15 September 2026 after CERT Polska report

#Google#Meta#Android#GooglePlay

CERT Polska: Meta ads funneled Polish users into premium-rate billing scam

Security

CERT Polska links 17 Android apps via a reused TLS certificate

Business

Devastated father says his 9-year-old son spent $118,000 on YouTube ad campaigns for his Minecraft channel using a company credit card — bill racked up in just three weeks was supposed to be one $20 p

CERT Polska exposes Android toll fraud campaign run through Facebook ads

CERT Polska: Meta ads funneled Polish users into premium-rate billing scam

CERT Polska links 17 Android apps via a reused TLS certificate

Devastated father says his 9-year-old son spent $118,000 on YouTube ad campaigns for his Minecraft channel using a company credit card — bill racked up in just three weeks was supposed to be one $20 p

Meta launches Muse for Small Business with ad and analytics access