This evil Android trojan is targeting hundreds of banking apps to spread money-stealing malware

Date:
Tue, 27 Jun 2023 11:23:20 +0000

Description:
More and more users targeted by money-stealing Android malware spread on the Play Store.

FULL STORY ======================================================================

Banking Trojan Anatsa is behind multiple confirmed fraud cases from Android apps sold on the Google Play Store, according to cybersecurity company ThreatFabric .

With over 30,000 installations, ThreatFabric says that the campaigns target list contains almost 600 financial applications from all over the world, and its most recent attacks have been centered around the US, the US, Germany, Austria, and Switzerland.

By stealing credentials used to authenticate mobile banking customers and
then performing Device-Takeover Fraud, the threat actor has been carrying out fraudulent transactions since Anatsas discovery in 2020. Watch out for this mobile banking malware

Based on the number of targeted applications per country, the US tops the charts. Italy, Germany, the UK, and France round off the top five, and the UAE, Switzerland, South Korea, Australia, and Sweden complete the top 10.
Read more

These are the best firewalls to stay protected online

Researchers claim malware is rife on the Google Play Store

This new malware is proving quite popular... and dangerous

In less than a year, ThreatFabric has added a further 90 applications that have been targeted to spread the money-stealing malware , but dont be fooled: you dont need to be downloading a banking app to be affected.

Because people typically have their guard up when it comes to online banking, many of the malware droppers identified by the cybersecurity researchers have posed as PDF viewers. Having informed the Play Store of its findings, ThreatFabric found Google quick to react, but the threat actors just as quick to republish apps of a similar nature.

Sensitive information like credentials, credit card details, balance, and payment information is collected from the infected device. The threat actor then goes on to exfiltrate money through cryptocurrencies and local mules in
a Device Takeover attack, which has so far proven challenging for banking anti-fraud systems to catch.

Referring to an evolving threat landscape that baking institutions are having to deal with, Internet users are being urged to remain vigilant when it comes to sharing details with third parties online, including following ads to download apps and content. Potential victims should consider using identity theft protection software



======================================================================
Link to news story: https://www.techradar.com/pro/this-evil-android-trojan-is-targeting-hundreds-o f-banking-apps-to-spread-money-stealing-malware


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)