Cybersecurity specialists at ThreatFabric have warned about the Brokewell Trojan that presents itself as a fake Chrome update to steal data and bank accounts on Android 13+.

According to specialists, this malware can bypass security restrictions and violate access to give criminals remote access to all “assets available through mobile banking.”

It is a real threat, since once the user authorizes the fake Chrome update, the Trojan is downloaded and, through the executable file, enters the device to steal information.

This new family of mobile malware discovered by ThreatFabric constitutes a “major threat to the banking industry.”

The Brokewell Trojan overlay technique “is common for this type of malicious software, in which it overlays a fake screen on a specific application to capture user credentials. Likewise, it has the ability to steal session cookies and send them to a command and control server (C2).”

Researchers from the cybersecurity firm have pointed out that the Trojan has an accessibility log, which captures everything that happens inside the device, such as keystrokes on the screen, what open applications show, call history, geolocation, audio.

M.Pino

Source: elcomercio                

(Reference image source: Unsplash+, in collaboration with Getty Images)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Brokewell Trojan steals accounts and banking details on Android13+ apareció primero en Bitfinance.

Cybercriminals are taking advantage of the popularity of Super Mario video games to distribute a Trojan horse via a legitimate installer, with the aim of stealing digital service credentials and mining Monero.

Super Mario 3: Mario Forever is an adaptation of the original game that Nintendo released in 1988 for SNES, which can be played on both mobile (Android, iOS) and computer (Windows, Mac).

This is not an official Nintendo game, and it can be found on secondary game download pages, for free, that do not have the protections implemented by official stores such as the Microsoft Store or the Nintendo eShop.

For this reason, from the cybersecurity company Cyble, they advise those who have downloaded the game for Windows to check if the computer contains ‘malware’, since they have detected a malicious campaign that takes advantage of the legitimate installer of this title to distribute a Trojan horse.

The fraudulent version contains the game installer and two executable files that are installed in the AppData directory of the victim’s computer, from where they steal information from the browser, screen or webcam, and start mining the monero cryptocurrency.

This Trojan hides itself from detection systems by making a duplicate that it saves in a hidden folder in the game, scheduling a task that runs that copy every 15 minutes, pretending to be a legitimate process, and deleting the original file. It also modifies the settings of antivirus systems so that they are no longer effective.

In case of carrying out a security check and detecting ‘malware’, it is recommended to eliminate it as soon as possible and reset the credentials of the most sensitive digital services. To avoid it, it is a good idea to install games from official stores and keep the operating system and applications installed on the computer up to date.

Source: dpa

(Reference image source: Nintendo / dpa)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Super Mario video game downloads could install a Trojan apareció primero en Bitfinance.

A team of researchers discovered a new subscription trojan called Fleckpe that is embedded in various photo-editing apps listed on the official Google Play store and downloaded on more than 620,000 devices.

Subscription Trojans are variants that infiltrate smartphones under the guise of legitimate applications that subscribe to payment services without users being aware of it.

This malware, which has been active since 2022, managed to get into applications that offer filters for photos and wallpapers, such as Beauty Slimming Photo Editor or Photo Effect Editor.

This was explained by Kaspersky researchers, who have indicated that they have noticed a total of 11 applications infected by Fleckpe on Google Play, which have been installed on more than 620,000 devices.

Other applications affected by this malware include Gif Camera Editor Pro, Night Cam Rea Pro, Microclip Video Editor, Toolbox Photo Editor, H4KS Wallpaper, and Beauty Camera Plus Photo Editor.

The cybersecurity company assured that the application store has removed these applications “as soon as the report was published” in which it determined that they were dangerous. However, from Kaspersky they announce that “malicious actors could have implemented other applications not yet discovered.”

Source: dpa

(Reference image source: Muha Ajjan, Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada More than 620,000 devices affected by a subscription Trojan apareció primero en Bitfinance.

A team of cybersecurity analysts found a Trojan capable of issuing paid subscriptions and stealing WhatsApp accounts in a modified application of this messaging platform.

Kaspersky researchers have found references to a malware called Triada integrated into a ‘mod’ of the service developed by Meta, whose fraudulent version is called YoWhatsApp.

A mod is a transformed version of a program or an application that provides functions that the official services do not offer, such as new settings, maps or characters in the case of video games.

In the case of WhatsApp, mods often offer alternative options to the original application, such as wallpapers, custom fonts for chats, and password-protected access to certain conversations, among other features.

According to the investigations of this cybersecurity company, more than 3,600 users would have been exposed to this cyber threat in the last two months by downloading YoWhatsApp, an application advertised on Snaptube and also distributed through Vidmate.

Kaspersky believes that the success of this mod is due precisely to the fact that both applications, used by thousands of people around the world, advertise it. However, he thinks that it is most likely that even his developers were not aware of this danger.

Click the link to subscribe for free to our news and media group on Telegram: https://t.me/G_ELSUMARIO_News

Source: dpa

La entrada They find a Trojan capable of issuing subscriptions on WhatsApp apareció primero en Bitfinance.

Trojans that copy other popular posts like WhatsApp have been around for a long time, but the so-called Android.Spy.4498, which works as an imitation of WhatsApp, is the most common and the fastest growing so far in 2022.

WhatsApp viruses are malicious programs created by hackers who seek to scam people using different methods through the popular messaging service.

Users believe that they are installing a legitimate app. However, by placing a fake app they run the risk of being harmed, because they can access their phone information through notifications and even install other malicious apps without user consent.

On the other hand, the fact of accessing the notifications gives cybercriminals the opportunity “to skip the two-step verification that many banking apps require, above all.”

Official platforms avoid Trojans

People can avoid being victims of Trojans as long as “you don’t download apps outside of the official stores, that is, the App Store or Google Play”. Some Smartphones do not have access to the Play Store and “you have been tempted to install an app through unofficial platforms and that is precisely where you run the risk”, because official platforms such as Google Play are responsible for offering reliable apps that will not damage the mobile.

On the other hand, sometimes they advertise other apps that serve to “complement” other already existing apps, but you should keep in mind that you run the risk of obtaining unwanted viruses or Trojans.

It is important to note that if you have any of the following WhatsApp mods installed: GBWhatsApp; OBWhatsApp; WhatsApp Plus is recommended that you delete it.

Users also have the option to install an antivirus on their mobile, although it is not very frequent, nowadays the phones have enough space that it will not affect the storage unless the phone is very old. Among the most common antivirus brands, Bitdefender Mobile Security stand out.

M. Rodríguez

Source: pcworld.es

La entrada Spy Trojan Android.Spy.4498 is growing in 2022 apareció primero en Bitfinance.