Microsoft has a special team called 365 Defender in its ranks, which informs users about potential threats in terms of the security of their equipment. The latest report of this group indicates that on Android phones, the development of malicious malware has been noticed, which in practice is trolling software, but it can also cause financial damage to users even without their knowledge.

Troll fraud software is reaching more and more Android devices. The software forces the phone to connect to the mobile operator's network from our SIM card in order to make premium SMS messages or to make calls to paid phone numbers. The attack begins when no Wi-Fi connection is detected on the phone. The malware then automatically starts its malicious activity, while also silencing notifications about paid telephone services, so that users are often completely unaware that they have dangerous software on their hardware. The reported malware activity affects phones using Android 9 or earlier. Phones with newer software are resistant to operation of the virus.

source