The Singapore Police Force (SPF) has announced the extradition of two men from Malaysia for their alleged involvement in an Android malware distribution targeting citizens since June 2023.
The two men, aged 26 and 47, tricked unsuspecting users into downloading malicious apps on their Android devices through phishing campaigns. Their goal was to steal personal data and banking credentials.
The stolen information was then used to initiate fraudulent transactions in the victims' bank accounts.
See also: Fake Chrome errors lead to malware installation
After a seven-month investigation that began in November 2023 in collaboration with the Hong Kong Police Force (HKPF) and the Royal Malaysian Police (RMP), the Singapore Police Force found evidence linking the two men to a syndicate involved in malware fraud.
Police said the two defendants operated servers with the intent of infecting victims' Android devices with a malicious Android Package Kit (APK). They were then able to control the devices.
“The malicious APK allowed the fraudsters to modify the content of the victims' mobile phones, which facilitated the subsequent breach of their bank accounts.“.
See also: NiceRAT malware targets users through cracked software
Group-IB, based in Singapore, said the malicious apps lured Android users with special prices on goods and food items, and the malware had features to collect various information.
“After installation and granting the necessary permissions, the RAT malware allows threat actors to remotely control the Android device, allowing them to record sensitive personal data and passwords with keylogger and screen recording features,” the company said.
“The RAT allowed threat actors to monitor SMS messagescontaining one-time passwords (OTPs) sent by financial institutions as two-factor authentication. In addition, the RAT facilitated real-time tracking of the device and user’s geographic location. Running discreetly in the background, the malware persists even after the Android device is rebooted.“.
One of the two suspects faces up to seven years in prison, a $50,000 fine, or both, while the second faces up to 10 years in prison and a fine of up to $500,000.
See also: New DISGOMOJI malware is controlled via emoji from Discord
To protect against Android malware, it is important for users to follow some security best practices, such as:
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
- download apps from trusted sources like the Google Play Store
- Device and app updates
- Be very careful with suspicious links or attachments sent via email or messaging apps.
Additionally, using a reputable antivirus can help detect and remove malware on Android devices. As technology evolves, so do the tactics cybercriminals use to target Android users. Staying informed about potential threats and taking the necessary precautions can help keep your device and personal information safe. Therefore, you should always be vigilant and take preventive measures to protect your Android device from malware!
Source: thehackernews.com
