Android: a flaw exposes users' bank data and passwords -

Geeko

Zimperium cybersecurity researchers warn of particularly sophisticated new malware spreading across Android.

The latter is indeed passing for a system update to scam its victims and spread on their smartphone.

Once installed, the malware can take complete control of the device and steal the personal data of its victims.

The malware hides in APK files of applications.

These are files that allow you to enjoy paid applications free of charge or that are not available in your geographical area.

Several online stores list this type of file.

Some Android smartphone owners resort to APK files due to the fact that their device is too old and cannot take advantage of this or that application.

Unfortunately, in addition to flirting with legality, these files often contain malicious code.

APKs are indeed a great way for hackers to infiltrate smartphones since most online stores either do not check file reliability or are unable to do so properly.

Malware spreads across Android pretending to be an update - Geeko

Credit: Zimperium

A perfect illusion

In this case, the application containing the malware displays a notification supposedly coming from the operating system of the smartphone on which it was installed.

The notification prompts the user to install a system update and requires several permissions to do so.

Unfortunately, the illusion is perfect, so the malware will very often obtain the permissions it needs to take full control of the smartphone and thus become a real spy.

The malware will indeed be able to access the contacts and messages saved on the phone, but also the various applications installed on it, the call history, its geolocation, the microphone and the various cameras of the smartphone.

The malware authors can therefore track their victims and gather personal information without their knowledge.

For the CEO of cybersecurity firm Zimperium, Shridhar Mittal, the malware in question is particularly sophisticated.

It certainly took a lot of time and effort to develop.

To avoid this kind of bad surprise, it is obviously advisable not to install APK files.

Google also advises to rely only on applications available on the Play Store, which has protective measures to counter malware hidden in certain apps.

High-Tech

CopperStealer: Malware hacks passwords for Google, Facebook or PayPal accounts

Society

Internet: The personal data of 363,000 Haut-Garonnais leaks after a hack

  • Cyber ​​attack

  • High-Tech

  • Android

  • Hacker

  • Smartphone

  • Cybersecurity

  • Personal data