This new Android trojan is targeting all your mobile bank accounts

Date:
Mon, 27 Mar 2023 16:08:34 +0000

Description:
Android banking trojan borrows code from a previous attack to get started,
but promises to get more advanced.

FULL STORY ======================================================================

Its not just legitimate companies looking to drive profitability through -aaS models, because this new MaaS (malware-as-a-service) subscription is offering cybercriminals the activity to rent access to a trojan that can steal your banking data.

The botnet, named Nexus, was first made available on a forum in January 2023 when it was described as a very new project which would be under continuous development - although it was available at a cost of $3,000 per month.

However, Italian cybersecurity firm Cleafy now says that it has been around since June 2022, and shares some code similarities with an Android banking trojan that emerged in mid-2021. Android banking trojan

As part of the MaaSs code of conduct, users are prohibited from using Nexus
in Russia and other CIS states. The code indicates this, as it ignores Azerbaijan, Armenia, Belarus, Kazakhstan, Kyrgyzstan, Moldova, the Russian Federation, Tajikistan, Uzbekistan, Ukraine, and Indonesia. Read more

These are the best ID theft protection tools around

The FakeCalls Android banking scam is back

This sneaky credit card stealer hides within payment processors to avoid

security scans

It works by stealing passwords from banking apps, and even those secured with two-factor authentication (2FA) arent necessarily safe because certain accessibility features that expose SMS and Google Authenticator codes for
ease of use can be accessed by the trojan.

Once Nexus is installed on an unsuspecting victims device, it connects to a
C2 server and provides a C2 web panel for cybercriminals to carry out their attacks and receive stolen data.

Despite its similarities to a previous trojan, researchers have concluded
that this represents a new attack operated by a different group. This, combined with its infancy and threat of continuous development, make it one worth keeping an eye on, while online banking customers are urged to ensure that their accounts remain protected by multiple layers. Here are the best endpoint protection tools and best firewalls



======================================================================
Link to news story: https://www.techradar.com/news/this-new-android-trojan-is-targeting-all-your-m obile-bank-accounts


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)