Aberebot On The Rise: New Banking Trojan Variant with improved functionalities

guest · Dec 6, 2021

Report: Aberebot-2.0 Hits Banking Apps and Crypto Wallets
Newer, More Capable Aberebot Banking Trojan Variant on Sale for $7,000 on Dark Web
December 1, 2021

A new variant of the Aberebot banking malware, targeting 213 banking apps and nine crypto wallet apps in 22 countries, has been uncovered by researchers. Named Aberebot-2.0, the Telegram-based malware is the new version of the Aberebot Android banking Trojan discovered in July 2021.

Aberebot-2.0 uses Telegram APIs to communicate with operators and is capable of stealing sensitive information, including users' financial and personal data, using phishing webpages, according to researchers at cybersecurity company Cyble.
Click to expand...

The Telegram bot's API is used as a command-and-control server, as Telegram bots cannot be taken down like web servers and because the messaging platform does not share user information with law enforcement agencies, the report says, citing a note by Aberebot’s creator that is published on the dark web.

The malware bot works on Android versions 9 through 12 and is for sale on a dark web forum for $7,000, the creator's note says. The source code, the note claims, is also up for sale as the creator says they are "moving on to new projects." Cyble says that the price of the source code on the dark web is $3,000.
Click to expand...

Malware Delivery
The new version of the Aberebot malware is spreading through Croatian website FinaCertifikat, according to Cyble researchers.

The sideloading feature available in Android devices to install apps from sources other than Google Play Store allows for the malware installation, Kaustubh Medhe, head of intelligence and research at Cyble, tells Information Security Media Group.
Click to expand...

Cyble: New Telegram Based Malware Aberebot-2.0 Targets Social Media, CryptoCurrency Applications And 213 Banks In 22 Countries

In July, Cyble Research Lab unveiled Aberebot, a new Android banking malware for sale on the dark web. The malware’s creators have also lately announced the introduction of a new version with improved functionalities. The announcement in a dark web forum is shown in the below figure.
Click to expand...

Log in or Sign up

Aberebot On The Rise: New Banking Trojan Variant with improved functionalities

guest Guest

Log in or Sign up

Aberebot On The Rise: New Banking Trojan Variant with improved functionalities

guest Guest

Useful Searches