Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts

guest · Oct 6, 2021

Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts
September 29, 2021
https://thehackernews.com/2021/09/hackers-targeting-brazils-pix-payment.html

Two newly discovered malicious Android applications on Google Play Store have been used to target users of Brazil's instant payment ecosystem in a likely attempt to lure victims into fraudulently transferring their entire account balances into another bank account under cybercriminals' control.

"The attackers distributed two different variants of banking malware, named PixStealer and MalRhino, through two separate malicious applications […] to carry out their attacks," Check Point Research said in an analysis shared with The Hacker News. "Both malicious applications were designed to steal money of victims through user interaction and the original PIX application."
The two apps in question, which were uncovered in April 2021, have since been removed from the app store.
Click to expand...

PixStealer, which was found distributed on Google Play as a fake PagBank Cashback service app, is designed to empty a victim's funds to an actor-controlled account, while MalRhino — masquerading as a mobile token app for Brazil's Inter bank — comes with advanced features necessary to collect the list of installed apps and retrieve PIN for specific banks.

What unites PixStealer and MalRhino is that both the apps abuse Android's accessibility service to perform malicious actions on the compromised devices, making them the latest addition to a long list of mobile malware that leverages the permission to perpetrate data theft.
Click to expand...

Check Point Research: PixStealer: a new wave of Android banking Trojans abusing Accessibility Services

In this article, we analyzed two significantly different versions of the banking malware. Both of them introduced new innovative techniques to perform different actions on victims’ mobile bank accounts. PixStealer version uses the Pix instant payment system to transfer all the funds in the victim’s account to an actor-controlled one by abusing the Accessibility Service on an unsuspecting user’s phone.

The MalRhino version uses a JavaScript-based framework to run commands inside banking applications. With the increasing abuse of the Accessibility Service by mobile bankers malware, users should be wary of enabling the relevant permissions even in the applications distributed via known app stores such as Google Play.
Click to expand...

guest · Oct 6, 2021

Brazilian data protection authority investigates first PIX data leak
October 6, 2021
https://www.zdnet.com/article/brazilian-data-protection-authority-investigates-first-pix-data-leak/

Brazil's national data protection authority (ANPD) is investigating the first leak of instant payment credentials under the custody and responsibility of the Bank of the State of Sergipe (Banese).

The incident, reported by the Central Bank on September 30, saw 395,009 phone numbers of non-account holders used as "keys" for transactions carried out through Pix, the country's instant payments system.
Click to expand...

In a statement, ANPD noted that it received a communication "from a financial institution about a security incident around the leakage of personal data of holders through the Instant Payments System (Pix)" on September 30.
The data protection body added that, on the same day, it was contacted by the Central Bank about a security incident on the same fact. This is the first major leak involving Pix, since its launch last November.

"Within the scope of its legal mission, [ANPD] will work with those responsible to ensure that the [Pix key] holders are properly informed, to ensure all the technical measures are adopted to avoid new similar incidents and that the appropriate actions are taken to reduce the impact of what happened on [key] holders", the noted added.
Click to expand...

Log in or Sign up

Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts

guest Guest

guest Guest

Log in or Sign up

Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts

guest Guest

guest Guest

Useful Searches