The CallPhantom campaign involved 28 fraudulent Android apps on Google Play that exploited user curiosity about call records to achieve over 7.3 million downloads; the specific attack vector and technical method were not detailed in the provided article. No CVSS score, affected versions, fixed version, or workaround were provided in the source text.
Scams targeting Android users in India and across the Asia-Pacific region have grown around a long-standing curiosity gap: the desire to look up call records tied to a phone number. A cluster of 28 fraudulent apps on Google Play exploited that gap and pulled in more than 7.3 million downloads before the store removed them. ESET researchers, who tracked the campaign and named it CallPhantom, reported the apps to Google on December 16, 2025, and … More → The post CallPhantom Android scam reached 7.3 million downloads on Google Play appeared first on Help Net Security .