A cybercriminal group created a platform for delivering fraudulent content and siphoned tens of millions of dollars from victims. The platform consists of unassuming Android apps, the most popular of which had less than 1 million downloads. When installed, these apps would inundate the user with five popup alerts every hour, notifying them they won a free gift. Clicking through the popup leads to a page that asks for the user’s phone number. If the victim enters their number, the GriftHorse server automatically signs them up for several premium SMS services.”]

