Android malware steals your money

[Bradley Prior]

Android malware steals your money

Millions of fully-patched Android smartphones are exposed to malware that is designed to steal money from users' bank accounts.

Researchers from security firm Promon found that many malicious apps are using the "StrandHogg" vulnerability to disguise themselves as legitimate apps already installed on users' devices.

 

[Kloofvreter]

Good old Google Play Store.

 

[mercurial]

WTAF

 

[Swa]

Why it's not a good idea to keep on updating all your apps.

 

[Ninja'd]

 

[Kloofvreter]

Why it's not a good idea to keep on updating all your apps.

LMAO

 

[Swa]

LMAO

Don't know if that's an affirmation or not.

 

[saor]

Don't know if that's an affirmation or not.

Depends if you were being sarcastic or not.

 

[Swa]

Depends if you were being sarcastic or not.

Read the article.

 

[Kloofvreter]

Depends if you were being sarcastic or not.

Too complex a suggestion.

 

[saor]

Read the article.

Get bent.
(Still not seeing anything relevant to updating apps?)

 

[PsyWulf]

It's not an updating issue

Malicious app can overlay and pose as any other app being executed

The examples in the original disclosure had banking app being run,with a fakeapp overlay giving its own login page then stealing the credentials,or asking for permissions to the phone

It's native phone app phishing with little real defense

 

[Swa]

Get bent.
(Still not seeing anything relevant to updating apps?)

Do you know how it works? If you do and you read the article you'd know that when installing apps you need to give specific permissions. Malicious apps can install themselves without privileges and when they update you give them more permissions without even knowing it because you think they're supposed to be there. Only updating apps you installed and actually use prevents that.

 

[saor]

Why it's not a good idea to keep on updating all your apps

Only updating apps you installed and actually use prevents that.

Ok so you're saying don't update the malware apps?
Thx for the heads up.

 

[Swa]

Ok so you're saying don't update the malware apps?
Thx for the heads up.

Don't make a habit of updating apps just for the sake of updating. There's no reason to update apps you don't use and you're not going to know which apps are the malware.