Categories: FinanceNewsSecurity

New Android Banking Malware Steals Login Credentials From Financial Apps

Banking malware is a significant threat to consumers all over the world. Criminals are stepping up their game by not only targeting PC users, but also going after mobile device owners. A new malicious Android Flash Player app is spreading new banking malware on a very large scale. Once the software is installed, the toolkit will extract credit card information, and even bypass 2FA security.

Another Malware Attack Against Android Users

It is not the first nor the last time Android users will be targeted by criminals. After all, Android remains the most popular mobile operating system in the world today. As adoption of mobile devices continues to increase, the number of potential cyber crime victims goes up as well. Mainly users conducting financial transactions on their mobile devices are of high value to criminals right now.

One thing the Android operating system lacks is a Flash player. That is not entirely surprising, as Flash is both vulnerable to cyber attacks, and has become obsolete in recent years. Unfortunately, some video content requires a Flash player, which forces Android users to circumvent this problem. A new type of malicious Flash Player app is making the rounds, which disguises its banking malware payload.

So far, it remains unclear how many devices have been infected with this banking malware. Security researchers did point out some of the more prominent financial institutions that are being targeted. As far as the distribution of this fake Android Flash player is concerned, all signs point towards third-party APK files being hosted on various websites.



Related Post

What is rather worrisome is how much damage this APK file can do. Stealing login credentials from banking apps is just the tip of the iceberg. It is also capable of intercepting SMS communication and bypassing two-factor authentication. Do keep in mind, though, that the latter is only possible when relying on SMS-based 2FA.

As soon as users have installed the fake Flash player, they will be tricked into granting it root privileges. Once this has been done, the malware starts running in the background, and cannot be interrupted through traditional means. Uninstalling the app is not possible, although users can revoke its administrator rights by going into the device’s security settings.

The collection of credit card information occurs by showing a screen overlay on top of existing applications. The malware can verify the entered information through a centralized command-and-control server. Entering credit card data should be avoided at all costs, through, as this data will be either sold on the deep web or abused by making fraudulent purchases.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

JP Buntinx

JP Buntinx is a FinTech and Bitcoin enthusiast living in Belgium. His passion for finance and technology made him one of the world's leading freelance Bitcoin writers, and he aims to achieve the same level of respect in the FinTech sector.

Share
Published by
JP Buntinx

Recent Posts

TRX Price Prediction: Tron Network Fee Cut to Spark New ATH?

Back into Spotlight: Tron Network Fee Cut Could Push TRX to ATH, But This DeFi…

8 hours ago

Altcoin Alert: Crypto Market Cap Breaches Key Level Hinting at an 8000x Rally for this Shiba Inu Killer

Shiba Inu (SHIB) gave enormous returns in 2021, making many early holders millionaires. After the…

12 hours ago

XRP Crash? XRP Falls Below $0.5 Resistance Level as Next Gen Altcoin JetBolt Takes Over

Spooky season might be over but doom is still looming as Ripple’s XRP falls below…

15 hours ago

This New Exchange Token Is Poised for a Price Surge Alongside Cardano and Avalanche – Analysts Predict Huge Gains This November

Three promising altcoins are causing a stir among investors this November: Avalanche (AVAX), Cardano (ADA),…

15 hours ago

With Dogecoin Dipping and TRON Holding, Is Lunex the Hottest Crypto Now?  

Everyone knows what the hottest crypto can do. When it was so hot it was…

15 hours ago

Tron Fees To Be Cut In Half Through Proposal 95, Cutoshi Surpasses $600k As TRX Investors Join CUTO Presale

The Tron network has witnessed incredible growth in several areas, especially in its adoption, which…

16 hours ago