Joker (Android)
Android billing fraud
Source Attribution
- Origin
- MITRE
- Source
- Google Play advisories
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Google Play advisories · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered Joker (Android) first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Joker is a continuously-updated Android malware family automating premium-subscription fraud. (attributes recorded from Google Play advisories).
Definition
Joker is a continuously-updated Android malware family automating premium-subscription fraud.
Overview
Joker is a continuously-updated Android malware family automating premium-subscription fraud.
Behavior
- Auto-subscription fraud
- hidden GooglePlay payloads
First Seen
2019-06
Target
Android billing fraud
Malware Intelligence
Family: Joker (Android)
Techniques: T1414
Targets: Android billing fraud
Behavior:
- Auto-subscription fraud
- hidden GooglePlay payloads
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.