A scam campaign called CallPhantom has appeared in 28 applications available on the Google Play store. The apps, which have been downloaded more than 7 million times combined, promised users access to their call logs.
The malicious software was distributed through legitimate-looking apps on the official Android marketplace. Once installed, the apps collected call data without proper user consent, according to reports of the scheme.