An update from our Cyberhood Watch partners Avast: 

In March, Avast threat researchers discovered more than 200 new fleeceware applications on the Apple App Store and the Google PlayStore. So far, the apps have been downloaded approximately one billion times and have accrued over $400 million in revenue to date*. Avast has reported the fleeceware applications to both Apple and Google for review.

Fleeceware is a recently coined term that refers to mobile applications that come with excessive subscription fees. The applications attract users with the promise of a free 3-day trial, but once the trial is over, they are charged a recurring subscription fee - even if they deleted the app by that time - until they cancel the subscription in their device’s app subscription settings. One of the apps, for example, offers a short free trial followed by a $66 per week subscription, potentially costing the victim $3,432 per year unless cancelled. These fleeceware applications are actively advertised on major social networks such as Facebook, Instagram, Snapchat and TikTok*.

"The fleeceware applications we've discovered consist predominantly of musical instrument apps, palm readers, image editors, camera filters, fortune tellers, QR code and PDF readers, and 'slime simulators'. While the applications generally fulfil their intended purpose, it is unlikely that a user would knowingly want to pay such a significant recurring fee for these applications, especially when there are cheaper or even free alternatives on the market," said Avast’s Threat Analyst Jakub Vávra in a blog post.

"It appears that part of the fleeceware strategy is to target younger audiences through playful themes and catchy advertisements on popular social networks with promises of 'free installation' or 'free to download'. By the time parents notice the weekly payments, the fleeceware may have already extracted significant amounts of money," continued Vávra. 

Avast researchers discovered the Android fleeceware applications via its mobile threat intelligence platform apklab.io, and then expanded their research to the Apple App Store. The apps with their estimated downloads and revenue can be found here* (Google Play Store) and here* (Apple App Store).

How to avoid Fleeceware apps 

With subscriptions becoming more prevalent in app stores, people are encouraged to be vigilant when downloading and using applications. To avoid fleeceware, Avast has offered the following advice:

  • Be careful with free trials of less than a week. Applications that offer free trials for very short periods should be handled with caution. Make sure you understand how much you will be charged and that the app is worth the recurring fee.
     
  • Be sceptical of viral advertisements for apps. The advertisements for fleeceware are likely to have enticing messaging and images to attract users’ attention. They likely do not reflect the actual functionality of the application.
     
  • Read the small print. A closer look will likely reveal the true price of the app. Read the application’s details carefully, paying close attention to the ‘In-app purchases’ sections. Make sure to familiarize yourself with the conditions of what you’re subscribing to, even if it is a free trial, as there may be automatic charges thereafter.
     
  • Secure your payments. Ensure that your payment methods are locked behind a password or biometric check. This can prevent accidental subscriptions by children as well.

*Source: Estimates and Ad Intelligence from Sensor Tower, a mobile apps marketing intelligence and insights company