'Dangerous' banking malware targets Android

Cape Town – Android mobile banking customers have to be wary of new malicious software capable of attacking online financial services, warns a security company.

Kaspersky Lab has warned that Acecard malware is able to bypass Google’s Play store security controls and trick users into downloading it.

“Mobile devices were usually infected after downloading a malicious application masquerading as a legitimate one. Acecard versions are typically distributed as Flash Player or PornoVideo, although other names are sometimes used in a bid to imitate useful and popular software,” Kaspersky said in a statement.

While the Trojan first made its appearance in 2014, Kaspersky noted a spike in late 2015 with 6 000 attacks as cyber authors developed up to 10 new versions of the malware.

It works by overlaying applications like Facebook, Gmail, WhatsApp and Skype with fake windows in order to steal login information and account details.

Creators

READ: Cyber crooks stalk victims on Valentine's Day

“A distinctive feature of this malware is that it’s capable of overlaying more than 30 banking and payment systems as well as social media, instant messaging and other apps,” said Roman Unuchek senior malware analyst at Kaspersky Lab US.

“The combination of Acecard’s capabilities and methods of propagation make this mobile banker one of the most dangerous threats to users today,” he warned.

Kaspersky believes that the code of the malware is similar enough to malware like TOR Trojan for Android Backdoor.AndroidOS.Torec.a and ransomware Trojan-Ransom.AndroidOS.Pletor.a that it indicates similar authorship.

“This cyber criminal group uses virtually every available method to propagate the banking Trojan Acecard. It can be distributed under the guise of another programme, via official app stores, or via other Trojans,” Unuchek said.

Kaspersky Lab advised Android users to avoid suspicious web pages and download links.


- Follow Duncan on Twitter

We live in a world where facts and fiction get blurred
In times of uncertainty you need journalism you can trust. For only R75 per month, you have access to a world of in-depth analyses, investigative journalism, top opinions and a range of features. Journalism strengthens democracy. Invest in the future today.
Subscribe to News24
Rand - Dollar
15.37
+0.2%
Rand - Pound
21.03
-0.0%
Rand - Euro
17.55
-0.0%
Rand - Aus dollar
11.08
-0.0%
Rand - Yen
0.13
-0.0%
Gold
1,817.74
0.0%
Silver
22.96
0.0%
Palladium
1,883.50
0.0%
Platinum
974.00
0.0%
Brent Crude
86.06
+1.9%
Top 40
68,448
-1.1%
All Share
75,160
-1.0%
Resource 10
74,434
-1.5%
Industrial 25
94,294
-1.0%
Financial 15
15,565
-0.3%
All JSE data delayed by at least 15 minutes Iress logo
Company Snapshot