A new malware, known as Ginp, is targeting Android. Security experts at ThreatFabric say that the malware reuses the Anubisto steal bank accounts from its victims without their knowledge.
According to research published by computer security firm ThreatFabric, the malware was discovered by Kaspersky in late October 2019, but has been infecting Android devices since June of that year. Researchers investigating it say it continues to develop, with its creators using the code of Anubis, a dangerous malware that had the ability to steal victims' accounts and PayPal
Since June, 5 versions of the malware have been detected. The malware disguises itself as popular applications, such as Adobe Flash Player, or a fake application called Google Play Verificator. At present, it is only spread through APK files available online. However, it is not yet able to penetrate the Google Play Store.
Once Ginp infiltrates a device, it first removes the fake appso that even if the user realizes something is wrong, they cannot delete the app. The malware then requests access to the smartphone’s accessibility services. Remember, these services provide special access to certain Android features to make them easier for people with disabilities to use.
After that, Ginp is able to collect and send SMS, make calls without the users' knowledge and launch malicious commands. In addition, when the user tries to open their bank application, strange windows appear. Ginp is able to perfectly execute the application interface to retrieve your banking information, as well as your credit card information.
According to ThreatFabric, Ginp also asks for your credit card details when making purchases on the Google Play Store. This way, users may share their data with hackers without suspecting it. For now, the malware mainly targets Spanish banking apps, including Caixa, Bankinter, Bankia, BBVA, EVO Banco, Debate, and Santander. However, it could soon spread to other European countries. To stay safe, it is recommended that you do not install any APK files and download apps that are offered exclusively on the Google Play Store or other trusted websites.
