Dangerous Android malware steals money from your bank account – Researchers from Doctor web security have discovered a banking trojan called Android.BankBot.65.origin , which has been created specifically for Android devices.
Cyber criminals add the malicious code to legitimate online banking applications (banking apps) and them «plant» in various third‑party Android markets and other various websites.
Because an exposed application looks and functions exactly like the legitimate one, potential victims are very likely to install it on their mobile devices.» Then, immediately after the installation of the application, the Trojan gains access to the device's system and begins to do terrible things.
Immediately after the installation of the Android.BankBot.65.origin malware, a special type of configuration file is generated that contains the operating parameters for the Trojan. The Trojan usually receives commands from the host server and then exploits all the vulnerabilities of the infected device, allowing cybercriminals to steal money by modifying the SMS.
It can also intercept incoming SMS messages and send the messages to numbers indicated by cyber criminals. Additionally, it is capable of adding various texts to the incoming SMS messages list.
Using these methods, cybercriminals steal money from users' bank accounts by simply sending a standard SMS message to transfer money from the user's bank account to the criminal's account, by intercepting messages containing codes , or by applying other deceptive methods.
Messages like “pre-approved Credit card asking personal information” are a prime example of the deceptive schemes that criminals use to lure users into their trap. Users share their banking credentials, which the criminals then use to automatically log into the bank’s system and steal their money.
Please note that it is of utmost importance to install banking (and not only these, of course!!) applications from authorized sources ONLY.
