{"id":165196,"date":"2025-09-18T10:07:08","date_gmt":"2025-09-18T10:07:08","guid":{"rendered":"https:\/\/www.newsbeep.com\/us\/165196\/"},"modified":"2025-09-18T10:07:08","modified_gmt":"2025-09-18T10:07:08","slug":"google-play-apps-with-38-million-downloads-linked-to-massive-ad-fraud-scheme","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us\/165196\/","title":{"rendered":"Google Play apps with 38 million downloads linked to massive ad fraud scheme\u00a0"},"content":{"rendered":"

Security researchers have discovered one of the largest mobile ad fraud schemes in recent years, involving 224 apps on the Google Play Store with more than 38 million downloads worldwide.<\/p>\n

The operation, dubbed SlopAds, secretly generated fake ad views and clicks in the background, stealing advertising dollars while offering no real engagement to brands.<\/p>\n

The campaign was uncovered by HUMAN\u2019s Satori Threat Intelligence team, which reported the apps to Google.<\/p>\n

In response, Google removed all the fraudulent apps and activated Play Protect, its automatic defense system that warns users and prompts them to uninstall harmful apps.<\/p>\n

How the scam worked\u00a0<\/p>\n

According to researchers, SlopAds hid its fraud mechanisms using steganography and WebViews, simplified browsers embedded in apps.<\/p>\n

These tools allowed the apps to open hidden windows, navigate to cashout sites controlled by fraudsters, and rack up fake ad impressions. At its peak, SlopAds was responsible for a staggering 2.3 billion bid requests per day, highlighting how costly the scheme could be for advertisers worldwide.Interestingly, the fraud was carefully engineered to remain undetected. Only apps downloaded after clicking on a SlopAds-controlled ad were activated to commit fraud, while others stayed dormant. Researchers described this as a \u201cnovel abuse of marketing attribution technology\u201d, showing how sophisticated ad fraud tactics have become.<\/p>\n

\u201cAll users who have these identified apps installed on their device will receive a warning and will be prompted to uninstall them. Play Protect is on by default on Android devices with Google Play Services,\u201d the report reads.<\/p>\n

Global reach and AI branding\u00a0<\/p>\n

SlopAds\u2019 fake ad traffic spanned 228 countries and territories, with most originating from the United States (31%), followed by India (11%) and Brazil (7%).<\/p>\n

Many of the fraudulent apps, along with the domains and servers used in the campaign, carried an AI theme, which inspired the SlopAds name.<\/p>\n

The apps also collected large amounts of device and browser data, allowing the fraudsters to tailor operations for maximum effectiveness.<\/p>\n

Encrypted instructions, delivered via Google\u2019s Firebase platform, directed the apps to fraud modules, cashout sites, and scripts needed to generate revenue.<\/p>\n

In some cases, even the fraud management module was hidden inside PNG images, later reassembled on users\u2019 devices to form executable code.<\/p>\n

One of the key cash-out methods involved HTML5 (H5) games and news sites owned by the fraudsters. These sites displayed ads at high frequency, but because they were loaded in hidden WebViews, users never saw them.Meanwhile, advertisers paid for impressions and clicks that never reached a real audience.For users, the apps appeared harmless but quietly drained device resources in the background. For advertisers, the losses ran into millions of dollars in wasted ad budgets.What you should know\u00a0<\/p>\n

This is not the first time fraudsters are hiding under apps on the Google Play Store to defraud or attack users.<\/p>\n

In October last year, Zscaler ThreatLabz research team revealed<\/a> that more than 200 apps on the Google Play Store, downloaded nearly eight million times, were found to be malicious.<\/p>\n

According to the report, Nigeria is one of the top 10 countries in the world targeted by these mobile malware attackers.<\/p>\n

Other top targets include India, the\u202fUS, Canada, South Africa, the Netherlands, Mexico, Brazil, Singapore, and the\u202fPhilippines.<\/p>\n

Follow us for Breaking News and Market Intelligence.
<\/a> <\/a> <\/a> <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Security researchers have discovered one of the largest mobile ad fraud schemes in recent years, involving 224 apps…\n","protected":false},"author":2,"featured_media":165197,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41],"tags":[99818,12430,165,99819,74],"class_list":{"0":"post-165196","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-mobile","8":"tag-advertising-fraud","9":"tag-google-play-store","10":"tag-mobile","11":"tag-slopads","12":"tag-technology"},"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/165196","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/comments?post=165196"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/165196\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media\/165197"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media?parent=165196"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/categories?post=165196"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/tags?post=165196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}