The attackers have also depended on sheer volume as their main tactic.Īctivity has been varied though with up to 23 different Bread apps uploaded on Play Store on the same day. Bread app developers have been discovered to use different variants and approaches and targeting different carriers.

Some apps even managed to bypass the Play Store's security by first releasing the clean version and offloading the malware later. 'Malware authors use injected clicks, custom HTML parsers and SMS receivers to automate the billing process without requiring any interaction from the user,' the blog post reads.īread apps have also different variants like displaying pop-up messages and posting fake reviews of newly published apps. Toll bill requires users to visit the URL to complete the payment. SMS billing is a process where carriers partner with vendors to pay for services via SMS. The blog post further explains how these apps evolved from the older billing method to the new one but both took advantage of the user's carrier.

Joker instal the new version for iphone