Beefed-up banking malware stalks smartphones

Android smartphone. (Duncan Alfreds, Fin24)
Android smartphone. (Duncan Alfreds, Fin24)

Cape Town – Cyber criminals have updated mobile malicious software to steal financial information, according to an internet security company.

On Monday, Kaspersky Lab reported that Trojan malware Asacub had been updated with the ability to steal financial data related to online banking.

“In autumn 2015 Kaspersky Lab’s experts discovered several new versions of the Asacub Trojan which confirmed its transformation into a tool for stealing money, with the new version equipped with phishing pages mimicking log-in pages of banking applications,” the company said in a statement.

Kaspersky added that the functionality of the malware has pushed into the firm’s top 10 most prevalent malicious programs targeting finances.

“These new versions also contained a new set of functions including call redirection and sending USSD requests (a special service for interactive non-voice and non-SMS communications between the user and cellular provider), which made Asacub a very powerful tool for financial fraud,” Kaspersky said.

READ: Cyber scammers blow holes in SA wallets

Analysis of the malware revealed links to other known malicious programs.

“When analysing this Trojan, we found that the Asacub malware has connections to criminals with links to a Windows-based spyware called CoreBot. The domain used by Asacub’s Command&Control centre is registered to the same person as tens of domains that were used by Corebot,” said Roman Unuchek, senior malware analyst at Kaspersky Lab US.

“It is therefore highly likely that these two types of malware are being developed or used by the same gang, who see huge value and criminal gain in exploiting mobile banking users,” Unuchek added.


- Follow Duncan on Twitter

ZAR/USD
16.90
(+0.83)
ZAR/GBP
21.14
(+0.48)
ZAR/EUR
19.06
(+0.62)
ZAR/AUD
11.70
(+0.63)
ZAR/JPY
0.16
(+0.96)
Gold
1770.10
(+0.24)
Silver
17.97
(+0.06)
Platinum
821.00
(+0.30)
Brent Crude
42.09
(+1.84)
Palladium
1909.00
(+0.66)
All Share
54761.56
(+1.81)
Top 40
50467.85
(+1.81)
Financial 15
10279.41
(+2.77)
Industrial 25
76351.12
(+1.49)
Resource 10
50859.19
(+1.76)
All JSE data delayed by at least 15 minutes morningstar logo
Company Snapshot
Voting Booth
Please select an option Oops! Something went wrong, please try again later.
Results
I'm not really directly affected
18% - 1528 votes
I am taking a hit, but should be able to recover in the next year
23% - 1996 votes
My finances have been devastated
34% - 2983 votes
It's still too early to know what the full effect will be
25% - 2164 votes
Vote