Google Play hides dangerous malware that could drain your bank account

While Google has removed 25 apps from the Play Store that could steal your Facebook credentials, the Mountain View company still has some cleanup to do. In fact, computer security researchers at Avast discovered that: Cerberus banking Trojan It was hiding in a Spanish app currency conversion.

Simply called Money Calculatorthis app has 10,000 downloads. According to Avast experts, the malicious app managed to defeat Google’s security systems by identifying itself and pretending to be one. a legitimate application in the first weeks after its launch.

The hackers then waited for the app to build up a sufficient user base. trigger sleep code and distribute the Cerberus banking trojan. This code connects the application to a C2 command-and-control server, which then instructs the application to download. Additional APK on users’ smartphones.

The art of concealment

Once this is done, Cerberus can take action. As a reminder, this trojan overlaps with banking applications or financial services installed on your device. Conveniently lurking in the background, the Trojan patiently waits for the user to launch one of their applications and enter their login credentials.

Source : Zdnet