Banking Trojan found on Google Play stole 10,000 Euros from victims

guest · Sep 26, 2018

Banking Trojan found on Google Play stole 10,000 Euros from victims
September 26, 2018
https://lukasstefanko.com/2018/09/b...ogle-play-stole-10000-euros-from-victims.html

Recently was discovered Android banking Trojan available on Google Play with more than 10,000 installs. This infiltration was capable of luring user’s banking credentials and send them to the attacker. Trojan was also capable of bypassing SMS two factor authentication.

Based on analysis, app targeted German, Polish and Czech banks. Based on bank statement two clients were affected with all together loss 280,000 KČ which is more than 10,900 Euro.
Analysis
Trojan application impersonated QRecorder – app to record phone calls.

Once launched, it would request user to allow it to draw over other apps as necessary functionality for app to work properly. However, this functionality helps the malware to control what is displayed to the user. [...] Once payload is downloaded it sets triggers for legitimate banking apps.
Click to expand...

Log in or Sign up

Banking Trojan found on Google Play stole 10,000 Euros from victims

guest Guest

Log in or Sign up

Banking Trojan found on Google Play stole 10,000 Euros from victims

guest Guest

Useful Searches