McAfee security experts have issued a new warning to UK Android users about a surge in fake applications that impersonate well-known brands, urging them to follow seven safety rules to avoid falling victim to subscription fraud and endless adverts.
The campaign uses apps that look like official software, with names such as CapCut, Roblox, Zelle, PayPal, Netflix, Xbox Game Pass, Siri and iMessage used to trick users into installing them. Once downloaded, the fake software displays endless adverts and attempts to sign users up to third-party subscription services, potentially leaving victims paying high monthly prices for services that do not exist.
Scale of the threat
McAfee's Mobile Research Team says it has identified more than 1,900 unique applications associated with the campaign across over 500,000 devices in more than 190 countries. The operators were releasing approximately 20 to 25 new applications per day, each leveraging different themes, brands, and impersonation targets.
In the United Kingdom, streaming, TV, and sports apps led at 17 percent of detections, followed by video and photo editors at 13 percent.
Seven safety tips
McAfee advises Android users to only download financial apps from their bank's official website or a verified link, and to be wary of "guide", "tutorial", "helper" and "tips" apps for products they already use. Users should always check the developer's name, not just the app's name and icon, and remember that if a product does not exist on their platform, no app can provide it—there is no Apple Pay, Siri or iMessage for Android.
Download numbers should not be trusted as a sign of safety, as several of these apps had tens of thousands of installs. Finally, McAfee recommends using mobile security software, with its own Mobile Security product able to detect this family of threats.
Exploiting trust
McAfee noted that mobile security has genuinely improved, but attackers have moved to a part of the system that cannot be patched: the judgment of the person holding the phone. They apply pressure where that judgment is weakest—through a familiar logo, an official store, or a name that matches what the user searched for.
As threat actors continue to exploit trust rather than software vulnerabilities, McAfee remains committed to protecting users, raising awareness, and collaborating across the industry to ensure that seemingly harmless applications do not evolve into large-scale fraud operations.
