LokiBot Redux Attacks Massive List of Common Android Apps

guest · Jul 16, 2020

LokiBot Redux Attacks Massive List of Common Android Apps
July 16, 2020
https://threatpost.com/lokibot-redux-common-android-apps/157458/

Researchers have discovered a new variant of the LokiBot trojan called BlackRock, that’s attacking not just financial and banking apps, but also a massive list of well-known and commonly used brand-name apps on Android devices.
The apps targeted include: Amazon, eBay, Facebook, Grinder, Instagram, Netflix, PlayStation, Reddit, Skype, Snapchat, TikTok, Tinder, Tumblr, Twitter and VK, among many others, researchers said.

The malware, which ThreatFabric discovered in May, is derived from the source code of the Xerxes banking malware, which itself is a variant of LokiBot, researchers said in report posted online Thursday.
Click to expand...

BlackRock is on one level a normal banking trojan, targeting banking and different crypto apps across various countries on at least five continents, including the United States, Japan, United Kingdom, Australia, France, Canada and Malaysia.
Among its features are those included in most credential-stealing malware, including the ability to perform overlay attacks; send, spam and steal SMS messages; lock the victim in the device home screen; and steal and hide notifications.
Click to expand...

ThreatFabric: BlackRock - the Trojan that wanted to get them all

When the malware is first launched on the device, it will start by hiding its icon from the app drawer, making it invisible to the end-user. As second step it asks the victim for the Accessibility Service privileges
Once the user grants the requested Accessibility Service privilege, BlackRock starts by granting itself additional permissions.

Although BlackRock poses a new Trojan with an exhaustive target list, looking at previous unsuccessful attempts of actors to revive LokiBot through new variants, we can't yet predict how long BlackRock will be active on the threat landscape.
Click to expand...

guest · Jul 19, 2020

New Android malware BlackRock and the damage it can cause: 5 things to know
This new Android malware called BlackRock can steal credit card data and passwords from almost 337 apps
July 19, 2020
https://tech.hindustantimes.com/tec...an-cause-5-things-to-know-71595130224149.html

We have told you about BlackRock, the new Android malware that can steal data from at least 337 Android apps. This malware was spotted in May this year for the first time and its list of potential targets includes popular apps like Snapchat, Gmail, Uber etc.
Discovered by mobile security company ThreatFabric, here are 5 important things you need to know about this malware:
[...]
This malware is currently being distributed in the guise of fake Google update packages offered by third party sites, but going by how Android malwares work, it should reach the Google Play Store soon.
Click to expand...

guest · Jul 30, 2020

CERT-In issues advisory for BlackRock malware targeting Android phones
July 30, 2020
https://timesofindia.indiatimes.com...eting-android-phones/articleshow/77261167.cms

The Indian Computer Emergency Response Team (CERT-In) has issued an advisory warning users about a new Android malware strain, called "BlackRock". This malware comes with data stealing capabilities, and is attacking a wide range of Android apps.

“The malware is developed using the source code of Xerxes banking malware, which itself is a variant of LokiBot android Trojan. The noteworthy feature of this malware is that the target list of applications of this malware which contains 337 applications includes not only banking and financial applications but also non-financial well known commonly used brand name apps on Android,” said CERT-In in its advisory.
BlackRock can simply be considered as a banking trojan and infects devices by luring users to download updates from unknown sources as it poses as fake Google updates. So, as long as you stick to official app sources, you should be safe.
What makes it dangerous is that popular antivirus apps are ineffective in tackling the threats of BlackRock.
Click to expand...

Log in or Sign up

LokiBot Redux Attacks Massive List of Common Android Apps

guest Guest

guest Guest

guest Guest

Log in or Sign up

LokiBot Redux Attacks Massive List of Common Android Apps

guest Guest

guest Guest

guest Guest

Useful Searches