Security News > 2022 > June > Toll fraud malware disables your WiFi to force premium subscriptions
Microsoft is warning that toll fraud malware is one of the most prevalent threats on Android and that it is evolving with features that allow automatic subscription to premium services.
In a report today, Microsoft shares technical details on how toll fraud malware works and how it can be prevented on Android.
Toll fraud malware then uses the 'NetworkCallbak' to monitor the network status and get the 'networktype' variable to bind the process to a specific network, thus forcing the device to ignore an available WiFi connection and use the mobile operator's.
Toll fraud malware samples the company analyzed have methods to achieve that, too.
Developers of toll fraud malware also implement mechanisms to keep the malicious behavior as discreet as possible.
Keeping toll fraud malware off your device comes down to checking that the source for downloading your Android source is trustworthy, such as Google's Play Store/.