Researchers have discovered a new banking virus called DroidBot used to steal victims’ personal data and even the PIN and unlock pattern of mobile phones.

Criminals are now using more sophisticated techniques to steal users’ data. DroidBot is “integrated with more than 70 banking applications, cryptocurrency exchange services and related entities for the Android operating system and downloaded in Spain, the United Kingdom, Italy, France and Portugal.”

Specialists indicate that DroidBot is a “sophisticated remote access trojan (RAT) that combines Virtual Network Computing (VNC) remote screen sharing with functions usually associated with spyware.”

The criminals hide the virus as a generic security application, Google services or popular banking applications.

The warning about this trojan was released last October, indicating that once installed it has the ability to “intercept incoming SMS messages from financial institutions, such as when they send transaction authentication numbers, and user interactions with the screen.”

The warning indicates that although cybercriminals have focused on users in Spain, the United Kingdom, Italy, France and Portugal, the attack could be extended to regions in Latin America through the virus hidden in “more than 77 banking applications, cryptocurrency exchanges, government entities and other related national organizations.”

M.Pino

Source: eleconomista

(Reference image source: Patrick Tomasso on Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada DroidBot banking virus steals PIN and unlock pattern from cell phone apareció primero en Bitfinance.

MaliBot was discovered last June, a banking malware that has become one of the most terrible threats for Android smartphone users, because it can steal passwords, bank details and even the contents of users’ cryptocurrency wallets.

The malware is capable of accessing text messages, stealing web browser cookies and taking screenshots on infected Android devices. MaliBot is also capable of spreading “through hijacking SMS capabilities to send malicious messages to other users.”

But the trickiest part is that malvare can spread by bypassing all “multi-factor authentication” protections. According to Check Point cyber security researchers it has become the third most frequent malvare for Android users.

Check Point Research Vice President Maya Horowitz noted that “While it’s always good to see law enforcement succeed in taking down cybercrime groups or malware like FluBot, it unfortunately wasn’t long before new mobile malware took its place”.

In addition to MaliBot, the most common Android malware in the month of June is AlienBot, a virus that allows remote attackers to inject malicious code into legitimate financial applications, access sensitive information in accounts and gain control of the device.

The other most prevalent Android malware in June was Anubis, which is a banking Trojan dating back to 2016 and continues to be an active threat.

Protection measures for users

It is very important that users are alert to any strange messages, which is why consumers should be aware of:

• Any text message that asks you to click on a link, as this is one of the most common ways of delivering mobile malware.
• It is important that application downloads are made from trusted sources such as the Google Play Store.
• It is recommended not to install applications from developers that only offer basic information, it could be a sign that the application could be a burning profile to distribute malware.

M. Rodríguez

Click the link to subscribe free to our news and media group on Telegram: https://t.me/G_ELSUMARIO_News

Source: tekcrispy.com 

La entrada MaliBot: the latest malware that threatens Android smartphones apareció primero en Bitfinance.