Android Trojan Targeting Over 420 Banking Apps Worldwide Constitute On Google Play Store

Do y'all similar watching funny videos online?

I am non sort of a funny person, but I beloved watching funny videos clips online, too this is 1 of the best things that people tin practise inwards their spare time.

But, beware if y'all bring installed a funny video app from Google Play Store.

H5N1 safety researcher has discovered a novel variant of the infamous Android banking Trojan hiding inwards apps nether dissimilar names, such as Funny Videos 2017, on Google Play Store.

Niels Croese, the safety researcher at Securify B.V firm, analyzed the Funny Videos app that has 1,000 to 5,000 installs too flora that the app acts similar whatever of the regular video applications on Play Store, but inwards the background, it targets victims from banks to a greater extent than or less the world.

This newly discovered banking Trojan industrial plant similar whatever other banking malware, but ii things that makes it dissimilar from others are — its capability to target victims and use of DexProtector tool to obfuscate the app's code.

Dubbed BankBot, the banking trojan targets customers of to a greater extent than than 420 banks to a greater extent than or less the world, including Citibank, ING, too some novel Dutch banks, similar ABN, Rabobank, ASN, Regiobank, too Binck, with many others.

How Android Banking Trojan Works

In a nutshell, BankBot is mobile banking malware that looks similar a elementary app too 1 time installed, allows users to picket funny videos, but inwards the background, the app tin intercept SMS too display overlays to bag banking information.

Mobile banking trojan ofttimes disguises itself every bit a plugin app, similar Flash, or an adult content app, but this app made its agency to Google Play Store past times disguising itself every bit whatever other regular Android app.

Google has removed this malicious app from its Play Store afterwards receiving the study from the researcher, but this does non hateful that to a greater extent than such apps practise non be at that topographic point with dissimilar names.

"Another work is that Google [Play Store] mainly relies on automated scanning without a total agreement of the electrical flow obfuscation vectors resulting inwards banking malware on the Google Play Store." researcher told The Hacker News.

Once downloaded, the app persistently requests administrative rights, too if granted, the banking malware tin command everything that's happening on an infected smartphone.

The BankBot springs into activity when the victim opens whatever of the mobile apps from a pre-configured listing of 425 banking apps. H5N1 consummate listing of banks a BankBot variant is currently imitating tin hold out flora on the blog post published past times the researcher.

Once 1 of the listed apps is opened, BankBot straightaway displays an overlay, which is a page on the acme of legitimate mobile banking app too tricks Android users entering their banking credentials into the overlay, but similar a phishing attack.

This volition non exclusively sends your banking credentials to your bank’s servers but also sends your fiscal credentials to the server controlled past times fraudsters.

This social technology scientific discipline technique is ofttimes used past times financially motivated criminals to deceive users into giving upwards their personal details too sensitive banking data to fraudsters.

How to protect yourself?

There are measure protection measures y'all demand to follow to stay unaffected:

• Install a proficient antivirus app that tin honor too block such malware earlier it tin infect your device. Always exceed away on the app up-to-date.
• Always stick to trusted sources, similar Google play Store too the Apple App Store, too verify app permissions earlier installing apps. If whatever app is asking to a greater extent than than what it is meant for, but practise non install it.
• Do non download apps from 3rd political party source. Although inwards this case, the app is existence distributed through the official Play Store, close ofttimes such malware are distributed via untrusted third-party app stores.
• Avoid unknown too unsecured Wi-Fi hotspots too Keep your Wi-Fi turned OFF when non inwards use.
• Be careful which apps y'all grade administrative rights to. Admin rights are powerful too tin grade an app total command of your device.
• Never click on links inwards SMS or MMS sent to your mobile phone. Even if the electronic mail looks legit, become lead to the website of source too verify whatever possible updates.

Share This :