New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads

A large-scale ad fraud campaign, codenamed Vapor, has been discovered on the Google Play Store. The campaign, which began in April 2024, involves hundreds of malicious apps disguised as legitimate utilities, fitness, and lifestyle applications. These apps, with over 60 million downloads, display intrusive full-screen ads, conduct phishing attacks, and attempt to collect sensitive information.