Play Store: Malware-infected apps installed on 300,000 Android smartphones

In its November 2021 report, ThreatFabric, a Dutch company specializing in IT security, warns its users against Android smartphones that install applications via the Play Store. “In just 4 months, 4 major Android malware families were distributed via the Google Play Store, resulting in over 300,000 infections across multiple apps.”announced ThreatFabric.

Hackers hid viruses in seemingly harmless applications to trick Internet users. ThreatFabric experts specifically use document scanners, QR Code readers, fitness monitors and apps dedicated to cryptocurrency. To bypass Google’s security measures, hackers remotely install malware once the app is installed on users’ smartphones. The app appears to be an update that forces users to install the virus. In this case, Play Protection becomes ineffective.

Malware aims to drain Android users’ bank accounts

The first category of malware that researchers identified is called Anasta. This advanced banking trojan managed to: 200,000 Android phones were leaked in just four months. The malware stole the banking information of 50,000 users using an app that allows you to scan a QR Code.

Researchers also detected the existence of a family of viruses called Alien. The malware, which has been active for over a year, actually works like Anasta. aims users’ bank accounts. Once recovered, victims’ bank information is sold to cybercriminals on the dark web or used to distribute attacks.

Finally, ThreatFabric detected Hydra and Ermac, two malware that targeted both banking and banking services. users of a cryptocurrency exchange platformIncluding Binance, Coinbase and Bitstamp. We also see PayPal, ING and Crédit du Nord among the targets.

“Google Play Store is the most attractive platform for malware”Dario Durando, malware expert at ThreatFabric, warns. All compromised apps Immediately deleted by Google, reassures the expert. To avoid falling prey to malware, Dario Durando recommends the following: “always check for updates, always be very careful before granting accessibility service privileges” and “be wary of applications that ask you to install additional software.”

Source : ZDNet