Malware

Malicious Android Apps Use WebView Automation to Commit

May 20, 2026 1 min read 11 views
cybersecurity enterprise news
Researchers identified fake Android apps that use WebView automation and JavaScript injection to subscribe users to premium services without consent. The apps also intercept OTPs to finalize fraudulent charges, resulting in millions of dollars in losses.

Was this article helpful?

0 found this helpful

Related Articles

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

1 min read

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

1 min read

Hirudo Android malware replaces banking apps to evade security checks

4 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo