CallPhantom apps detected on Google Play Store; here's how to protect yourself from such cyber threats

Cyber security firm ESET has uncovered 25-plus CallPhantom apps on Google Play Store, having installation on more than seven million phones, mainly in India.

For the uninitiated, CallPhantom apps are fraud service offered by cyber criminals. The app makers falsely claim to provide access to call logs, SMS records, and WhatsApp call history for any phone number in exchange for payment.

These apps used to offer multiple subscription packages, such as weekly, monthly, or yearly services, with the highest requested price sitting at US$80 (approx. Rs 7,675). For the lowest 'subscription tier,' the average requested price was around Rs 560.

ESET's report notes that CallPhantom apps mainly targeted Android users in India. Many of the apps came with India’s +91 country code preselected, and support UPI, a payment system used primarily in India. Around 53.7 per cent of all CallPhantom detections worldwide were found in India.

ESET, which is part of Google's App Defence Alliance, have so far identified 28 such malicious apps on the Play Store. And, it forwarded the details to the platform owner.

Taking cognisance of the issue, Google has taken down all the 28 CallPhantom apps from the Play Store.

Tips on how to protect yourself from such fake apps:

1) Always install and download apps from the official Google Play, Microsoft Windows Store, and Apple App Store only

2) Even if you are downloading from official websites or aforementioned platforms, make it a habit of reading the reviews of the app. The feedback shared by genuine users will let you know if the app is trustworthy or not.

3) If you ever receive messages from a known person, friend, or family member with URL links to third-party app stores or APK files, ignore them. Never install an APK file shared on WhatsApp or any messenger or social media platform. For 99 per cent of the time, they are risky and potentially come with malware-laced files

4) Ensure the device is fully updated to the latest version of the operating system. Smartphone, tablet and computer makers regularly send security patches along with OS updates to protect your device from such cyber threats

5) Also, to be on the safe side, install anti-virus apps by renowned publishers such as Kaspersky, ESET, Lookout, Zimperium and others.

In India, if you fall victim to online fraud, immediately call toll-free 1930. It is run by the Indian Cyber Crime Coordination Centre, and once you share the bank transaction details, they will be able to trace and freeze the mule bank accounts. Ensure you call them within one hour, as there will be a higher chance of blocking the cyber criminals from withdrawing the ill-got money.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.