- Trapdoor is an ad fraud campaign using 455 Android apps and 183 C2 domains
- The apps tricked users into fake updates, then secretly launched invisible WebViews to generate 659 million fraudulent ad bid requests daily
- Google removed the 24M+ downloaded apps after disclosure, with researchers warning of malvertising pipelines built from everyday installs
Security researchers have discovered and dismantled a major ad fraud and advertising operation that comprised hundreds of Android apps, and probably generated millions of dollars in profits.