90+ MALICIOUS APPS THAT STEAL BANK INFORMATION IN GOOGLE PLAY STORE

Wed 05 June 2024:

Beware Android users, these apps contain the dangerous Ansta virus, which is attacking your bank accounts.

Zscaler ThreatLabz has discovered a number of dangerous applications that contain dangerous malware that, after being installed, provide access to hackers inside phones, which they use to steal passwords, and allow them to withdraw money by accessing bank accounts.

The phone owner probably won’t realise anything is amiss until they check their bank balance because everything is done remotely.

The analysis found that Anatsa attack campaigns were often hidden inside practical tools such as PDF or QR code readers available in the Google Play store. Once installed, the apps are adept at evading detection while siphoning personal financial information via legitimate-looking updates.

The security team at Zscaler didn’t divulge the full list of 90+ malicious apps, but did release details about two such apps – PDF Reader & File Manager and QR Reader & File Manager – that had over 70,000 installations.

“This campaign impersonated PDF reader and QR code reader applications, as is often the case, to attract a large number of installations,” according to Zscaler. “The high number of installations further aids in deceiving victims into believing that these applications are genuine. At the time of analysis, both applications had already amassed over 70,000 installations.”

Among the most commonly-exploited types of apps were tools (39.4%), personalization (20.2%), photography (12.8%), productivity (9.6%) and health & fitness (7.4%).

Bad actors likely target the most popular Google Play categories because it’s easier for their malicious apps to blend in, according to the report’s authors.

When browsing for a new app, experts recommend looking out for low download numbers, unfavorable reviews, higher-than-average data usage and strange app descriptions.

A Google spokesperson told Nexstar that the company recommends using Google Play Protect, which “protects users by automatically removing or disabling apps known to contain this malware on Android devices with Google Play Services.”

SOURCE: INDEPENDENT PRESS AND NEWS AGENCIES

______________________________________________________________

FOLLOW INDEPENDENT PRESS:

WhatsApp CHANNEL
https://whatsapp.com/channel/0029VaAtNxX8fewmiFmN7N22