{"id":37356,"date":"2020-09-27T09:05:07","date_gmt":"2020-09-27T09:05:07","guid":{"rendered":"http:\/\/8fbcca3a-8660-40f4-a174-d80ca2240983"},"modified":"2020-09-27T09:05:07","modified_gmt":"2020-09-27T09:05:07","slug":"google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/","title":{"rendered":"Google removes 17 Android apps doing WAP billing fraud from the Play Store"},"content":{"rendered":"<figure class=\"image image-original shortcode-image\"><span class=\"img aspect-set \"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2020\/09\/27\/066b5f68-5689-4556-a8bd-1eab47a11282\/playstore-apps.png\" class alt=\"playstore-apps.png\"><\/span><figcaption><span class=\"caption\"><\/span><span class=\"credit\"> Image: Zscaler <\/span><\/figcaption><\/figure>\n<div class=\"relatedContent alignRight\" readability=\"9.5135135135135\">\n<h3 class=\"heading\"> <span class=\"int\">special feature<\/span> <\/h3>\n<div class=\"thumb\"> <a href=\"https:\/\/www.zdnet.com\/topic\/securing-your-mobile-enterprise\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\"> <span class=\"img \"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/zdnet2.cbsistatic.com\/hub\/i\/r\/2016\/06\/30\/91c9a3dc-977e-4860-96e4-2b7a8f09ad12\/resize\/220x165\/29141746b92408569acf6c91863e4efb\/sf-mobilesecurity2.jpg\" class alt=\"Securing Your Mobile Enterprise\" height=\"165\" width=\"220\"><\/span> <\/a> <\/div>\n<p class=\"title\"> <a href=\"https:\/\/www.zdnet.com\/topic\/securing-your-mobile-enterprise\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\"> Securing Your Mobile Enterprise <\/a> <\/p>\n<p class=\"dek\">Mobile devices continue their march toward becoming powerful productivity machines. But they are also major security risks if they aren&#8217;t managed properly. We look at the latest wisdom and best practices for securing the mobile workforce.<\/p>\n<p class=\"read-more\"> <a href=\"https:\/\/www.zdnet.com\/topic\/securing-your-mobile-enterprise\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\">Read More<\/a> <\/p>\n<\/p><\/div>\n<p>Google has removed this week 17 Android applications from the official Play Store. The 17 apps, spotted by security researchers from Zscaler, were infected with the Joker (aka Bread) malware.<\/p>\n<p>&#8220;This spyware is designed to steal SMS messages, contact lists, and device information, along with silently signing up the victim for premium wireless application protocol (WAP) services,&#8221; Zscaler security researcher Viral Gandhi&nbsp;<a href=\"https:\/\/www.zscaler.com\/blogs\/security-research\/joker-playing-hide-and-seek-google-play\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">said this week<\/a>.<\/p>\n<p>The 17 malicious apps were uploaded on the Play Store this month and didn&#8217;t get a chance to gain a following, having been downloaded more than 120,000 times before being detected.<\/p>\n<p>The names of the 17 apps were:<\/p>\n<ul>\n<li>All Good PDF Scanner<\/li>\n<li>Mint Leaf Message-Your Private Message<\/li>\n<li>Unique Keyboard &#8211; Fancy Fonts &amp; Free Emoticons<\/li>\n<li>Tangram App Lock<\/li>\n<li>Direct Messenger<\/li>\n<li>Private SMS<\/li>\n<li>One Sentence Translator &#8211; Multifunctional Translator<\/li>\n<li>Style Photo Collage<\/li>\n<li>Meticulous Scanner<\/li>\n<li>Desire Translate<\/li>\n<li>Talent Photo Editor &#8211; Blur focus<\/li>\n<li>Care Message<\/li>\n<li>Part Message<\/li>\n<li>Paper Doc Scanner<\/li>\n<li>Blue Scanner<\/li>\n<li>Hummingbird PDF Converter &#8211; Photo to PDF<\/li>\n<li>All Good PDF Scanner<\/li>\n<\/ul>\n<p>Following its internal procedures, Google removed the apps from the Play Store, used the Play Protect service to disable the apps on infected devices, but users still need to manually intervene and remove the apps from their devices.<\/p>\n<h3>Joker is the Play Store&#8217;s bane<\/h3>\n<p>But this recent takedown also marks the third such action from Google&#8217;s security team against a batch of Joker-infected apps over the past few months.<\/p>\n<p><a href=\"https:\/\/www.zdnet.com\/article\/android-security-six-more-apps-containing-joker-malware-removed-from-the-google-play-store\/\" target=\"_blank\" rel=\"noopener noreferrer\">Google removed six such apps<\/a>&nbsp;at the start of the month after they&#8217;ve been spotted and reported by security researchers from&nbsp;<a href=\"https:\/\/blog.pradeo.com\/pradeo-identifies-app-joker-malware-google-play\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Pradeo<\/a>.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\"> <\/section>\n<p>Before that, in July, Google removed another batch of Joker-infected apps discovered by security researchers from&nbsp;<a href=\"https:\/\/www.anquanke.com\/post\/id\/211978\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Anquanke<\/a>. This batch had been active since March and had managed to infect millions of devices.<\/p>\n<p>The way these infected apps usually manage to sneak their way past Google&#8217;s defenses and reach the Play Store is through a technique called &#8220;<a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/droppers-is-how-android-malware-keeps-sneaking-into-the-play-store\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">droppers<\/a>,&#8221; where the victim&#8217;s device is infected in a multi-stage process.<\/p>\n<p>The technique is quite simple, but hard to defend against, from Google&#8217;s perspective.<\/p>\n<p>Malware authors begin by cloning the functionality of a legitimate app and uploading it on the Play Store. This app is fully functional, requests access to dangerous permissions, but also doesn&#8217;t perform any malicious actions when it&#8217;s first run.<\/p>\n<p>Because the malicious actions are usually delayed by hours or days, Google&#8217;s security scans don&#8217;t pick up the malicious code, and Google usually allows the app to be listed on the Play Store.<\/p>\n<p>But once on a user&#8217;s device, the app eventually downloads and &#8220;drops&#8221; (hence the name droppers, or loaders) other components or apps on the device that contain the Joker malware or other malware strains.<\/p>\n<p>The Joker family, which Google tracks internally as Bread, has been one of the most ardent users of the dropper technique. This, in turn, has allowed Joker to make it on the Play Store \u2014the Holy Grail of most malware operations\u2014 more than many other malware groups.<\/p>\n<p>In January, Google published a&nbsp;<a href=\"https:\/\/security.googleblog.com\/2020\/01\/pha-family-highlights-bread-and-friends.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">blog post<\/a>&nbsp;where it described Joker as one of the most persistent and advanced threats it has dealt with in the past years. Google said that its security teams had removed&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/google-details-its-fight-against-the-bread-joker-malware-operation\/\" target=\"_blank\" rel=\"noopener noreferrer\">more than 1,700 apps<\/a>&nbsp;from the Play Store since 2017.<\/p>\n<p>But Joker is far more widespread than that, being also found in apps uploaded on third-party Android app stores as well.<\/p>\n<p>All in all, Anquanke said it detected more than 13,000 Joker samples since the malware was first discovered in December 2016.<\/p>\n<p>Protecting against Joker is hard, but if users show some caution when installing apps with broad permissions, they can avoid getting infected.<\/p>\n<h3>In other Android security news<\/h3>\n<p><a href=\"https:\/\/labs.bitdefender.com\/2020\/09\/apps-on-google-play-tainted-with-cerberus-banker-malware\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Bitdefender reported<\/a>&nbsp;a batch of malicious apps to Google&#8217;s security team. Some of these apps are still available on the Play Store. Bitdefender didn&#8217;t reveal the name of the apps, but only the names of the developer accounts from which they were uploaded. Users who have installed apps from these developers should remove them right away.<\/p>\n<ul>\n<li>Nouvette<\/li>\n<li>Piastos&nbsp;<\/li>\n<li>Progster&nbsp;<\/li>\n<li>imirova91&nbsp;<\/li>\n<li>StokeGroove&nbsp;<\/li>\n<li>VolkavStune&nbsp;<\/li>\n<\/ul>\n<p>ThreatFabric also published a report about&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/new-alien-malware-can-steal-passwords-from-226-android-apps\/\" target=\"_blank\" rel=\"noopener noreferrer\">the demise of the Cerberus<\/a>&nbsp;malware and&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/new-alien-malware-can-steal-passwords-from-226-android-apps\/\" target=\"_blank\" rel=\"noopener noreferrer\">the rise of the Alien malware<\/a>, which contains features to steal credentials for 226 applications.<\/p>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The 17 apps were infected with the Joker (Bread) malware, which Google described in January 2020 as one of the most persistent threats it dealt with since 2017.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":37357,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-37356","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Google removes 17 Android apps doing WAP billing fraud from the Play Store 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Google removes 17 Android apps doing WAP billing fraud from the Play Store 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-09-27T09:05:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"425\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Google removes 17 Android apps doing WAP billing fraud from the Play Store\",\"datePublished\":\"2020-09-27T09:05:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/\"},\"wordCount\":778,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/\",\"name\":\"Google removes 17 Android apps doing WAP billing fraud from the Play Store 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png\",\"datePublished\":\"2020-09-27T09:05:07+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png\",\"width\":770,\"height\":425},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Google removes 17 Android apps doing WAP billing fraud from the Play Store\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Google removes 17 Android apps doing WAP billing fraud from the Play Store 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/","og_locale":"en_US","og_type":"article","og_title":"Google removes 17 Android apps doing WAP billing fraud from the Play Store 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-09-27T09:05:07+00:00","og_image":[{"width":770,"height":425,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Google removes 17 Android apps doing WAP billing fraud from the Play Store","datePublished":"2020-09-27T09:05:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/"},"wordCount":778,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/","url":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/","name":"Google removes 17 Android apps doing WAP billing fraud from the Play Store 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png","datePublished":"2020-09-27T09:05:07+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store.png","width":770,"height":425},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/google-removes-17-android-apps-doing-wap-billing-fraud-from-the-play-store\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Google removes 17 Android apps doing WAP billing fraud from the Play Store"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/37356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=37356"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/37356\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/37357"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=37356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=37356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=37356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}