Researchers have discovered a new banking virus called DroidBot used to steal victims’ personal data and even the PIN and unlock pattern of mobile phones.

Criminals are now using more sophisticated techniques to steal users’ data. DroidBot is “integrated with more than 70 banking applications, cryptocurrency exchange services and related entities for the Android operating system and downloaded in Spain, the United Kingdom, Italy, France and Portugal.”

Specialists indicate that DroidBot is a “sophisticated remote access trojan (RAT) that combines Virtual Network Computing (VNC) remote screen sharing with functions usually associated with spyware.”

The criminals hide the virus as a generic security application, Google services or popular banking applications.

The warning about this trojan was released last October, indicating that once installed it has the ability to “intercept incoming SMS messages from financial institutions, such as when they send transaction authentication numbers, and user interactions with the screen.”

The warning indicates that although cybercriminals have focused on users in Spain, the United Kingdom, Italy, France and Portugal, the attack could be extended to regions in Latin America through the virus hidden in “more than 77 banking applications, cryptocurrency exchanges, government entities and other related national organizations.”

M.Pino

Source: eleconomista

(Reference image source: Patrick Tomasso on Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada DroidBot banking virus steals PIN and unlock pattern from cell phone apareció primero en Bitfinance.

A new way to steal personal data and hijack Facebook accounts is executed through malicious advertising that actually releases the dangerous SYS01 malware.

Through Facebook ads disguised as desktop themes and games, the SYS01 malware is released that takes over accounts and steals user data, according to the cybersecurity website Trustwave.

They have referred to a new malvertising campaign on Facebook that “uses ads offering Windows desktop themes, games and pirated software as a hook. By clicking, users download the SYS01 malware, designed to steal information and hijack social network accounts.”

The malware was identified in November 2022 and is known to “primarily target Facebook business accounts.” “This malware extracts browser data such as login credentials, browsing history, and cookies.”

Cyber​​attackers rely on ads for Windows desktop themes and games that are attractive to users, reaching a larger audience.

The site Trustwave, in its SpiderLabs threat intelligence study, discovered that this SYS01 campaign has been active since September of last year and remains on Facebook displaying fake ads such as “Awesome_Themes_for_Win_10_11.zip” or “Adobe_Photoshop_2023.zip”, which They contain the SYS01 malware that is installed using DLL executables, PowerShell scripts, and PHP.

Once the malware is installed on the computer, it “creates tasks and steals cookies, history and credentials saved in the browser, including cryptocurrency wallets.”

Significant damage occurs with the theft of the identity of the people behind the real accounts added to the financial damages.

M.Pino

Source: nacion

(Reference image source: Unsplash+, in collaboration with Getty Images)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Malicious advertising on Facebook executes SYS01 malware apareció primero en Bitfinance.