You are here

Android apps disguise themselves as Google apps to break your (crypto) bank balance.

Rosella's picture
Submitted by Rosella on Thu, 11/12/2020 - 20:22

The Kaspersky antivirus agency once again warns against a bad trick from cybercriminals. This time they are sending Trojans using a recycled method to find bank details and crypto wallets through Android apps. So be careful!

Kaspersky discovered in a recent study that a new wave of fraud is emerging. A group of criminals hack a so-called Trojan horse to download Android applications. These are distributed on sites and servers previously used for another operation, Operation Astaroth (Guildama).Buy kaspersky for androidpls visit Bzfuture.com .

Once the applications are installed, the downloaded malware will check the smartphone for the presence of the selected applications. When the software detects one or more of these applications, it automatically creates a fake login page for that particular application. When you enter your details, the credentials will be sent to the criminals behind this operation. You can imagine what will happen next.

How are these Android apps spread?
The applications originate in Brazil and initially focused primarily on Brazilian banking credentials. Kaspersky now reports that the applications are spreading internationally and are therefore also targeted at other banks. Furthermore, they are now focusing on digital crypto wallets as well.

The applications are not distributed through the Google Play Store, but rather by email and / or on websites where you can download the applications. In this case, of course, Android will warn you that you are downloading illegal applications. However, criminals use the names of reputable applications such as Google Defender, Google Docs, WhatsApp Updater or Flash Update. They expect users to ignore the warnings.

How can you protect yourself?
After the latest updates, 5 apps have already been found as destinations in Germany. So you can always prepare now. First of all, it is important to always download apps from the official Google app store. Although this is not a one hundred percent guarantee, these applications are not known there. You should also pay attention to "trusted names". It makes no sense for Google Android to send an error message when downloading a Google app.

If you still want to download an app from outside the Playstore, make sure the source is trustworthy. Google also has the name of the app first. Are there any criticisms or warnings? Finally, Kaspersky appoints the names Astaroth, Guidama and Ghimob as developers. If you see these names, it is best to close the window immediately. By the way, don't rely too heavily on your smartphone's antivirus.