Android malware steals your money

Bradley Prior

MyBroadband Journalist
Staff member
Super Moderator
Joined
Oct 16, 2018
Messages
4,136
Android malware steals your money

Millions of fully-patched Android smartphones are exposed to malware that is designed to steal money from users' bank accounts.

Researchers from security firm Promon found that many malicious apps are using the "StrandHogg" vulnerability to disguise themselves as legitimate apps already installed on users' devices.
 

Ninja'd

A Djinn
Joined
Jan 7, 2010
Messages
50,006
1256cf.jpg
 

PsyWulf

Honorary Master
Joined
Nov 22, 2006
Messages
11,292
It's not an updating issue

Malicious app can overlay and pose as any other app being executed

The examples in the original disclosure had banking app being run,with a fakeapp overlay giving its own login page then stealing the credentials,or asking for permissions to the phone

It's native phone app phishing with little real defense
 

Swa

Honorary Master
Joined
May 4, 2012
Messages
28,476
Get bent.
(Still not seeing anything relevant to updating apps?)
Do you know how it works? If you do and you read the article you'd know that when installing apps you need to give specific permissions. Malicious apps can install themselves without privileges and when they update you give them more permissions without even knowing it because you think they're supposed to be there. Only updating apps you installed and actually use prevents that.
 

Swa

Honorary Master
Joined
May 4, 2012
Messages
28,476
Ok so you're saying don't update the malware apps?
Thx for the heads up.
Don't make a habit of updating apps just for the sake of updating. There's no reason to update apps you don't use and you're not going to know which apps are the malware.
 
Top