'Dangerous' banking malware targets Android

Password. (Duncan Alfreds, Fin24)
Password. (Duncan Alfreds, Fin24)

Cape Town – Android mobile banking customers have to be wary of new malicious software capable of attacking online financial services, warns a security company.

Kaspersky Lab has warned that Acecard malware is able to bypass Google’s Play store security controls and trick users into downloading it.

“Mobile devices were usually infected after downloading a malicious application masquerading as a legitimate one. Acecard versions are typically distributed as Flash Player or PornoVideo, although other names are sometimes used in a bid to imitate useful and popular software,” Kaspersky said in a statement.

While the Trojan first made its appearance in 2014, Kaspersky noted a spike in late 2015 with 6 000 attacks as cyber authors developed up to 10 new versions of the malware.

It works by overlaying applications like Facebook, Gmail, WhatsApp and Skype with fake windows in order to steal login information and account details.

Creators

READ: Cyber crooks stalk victims on Valentine's Day

“A distinctive feature of this malware is that it’s capable of overlaying more than 30 banking and payment systems as well as social media, instant messaging and other apps,” said Roman Unuchek senior malware analyst at Kaspersky Lab US.

“The combination of Acecard’s capabilities and methods of propagation make this mobile banker one of the most dangerous threats to users today,” he warned.

Kaspersky believes that the code of the malware is similar enough to malware like TOR Trojan for Android Backdoor.AndroidOS.Torec.a and ransomware Trojan-Ransom.AndroidOS.Pletor.a that it indicates similar authorship.

“This cyber criminal group uses virtually every available method to propagate the banking Trojan Acecard. It can be distributed under the guise of another programme, via official app stores, or via other Trojans,” Unuchek said.

Kaspersky Lab advised Android users to avoid suspicious web pages and download links.


- Follow Duncan on Twitter

ZAR/USD
17.42
(-0.58)
ZAR/GBP
22.89
(-0.74)
ZAR/EUR
20.69
(-0.64)
ZAR/AUD
12.61
(-1.12)
ZAR/JPY
0.17
(-0.61)
Gold
2066.30
(+1.51)
Silver
29.05
(+8.23)
Platinum
1000.00
(+3.85)
Brent Crude
45.33
(+1.67)
Palladium
2212.63
(+2.24)
All Share
57656.69
(+0.05)
Top 40
53350.88
(+0.13)
Financial 15
9888.41
(-0.41)
Industrial 25
76178.50
(+0.02)
Resource 10
60086.05
(+0.49)
All JSE data delayed by at least 15 minutes morningstar logo
Company Snapshot
Voting Booth
Do you think it was a good idea for the government to approach the IMF for a $4.3 billion loan to fight Covid-19?
Please select an option Oops! Something went wrong, please try again later.
Results
Yes. We need the money.
11% - 913 votes
It depends on how the funds are used.
74% - 6065 votes
No. We should have gotten the loan elsewhere.
15% - 1236 votes
Vote