Technology

58303 readers

9 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

[Malwarebytes Blog] Android banking trojans: How they steal passwords and drain bank accounts (www.malwarebytes.com)

submitted 8 months ago by [email protected] to c/[email protected]

9 comments fedilink hide all child comments

This article warns users about Android banking trojans, a type of malware that steals online banking credentials and drains accounts.

Key points:

Prevalence: These trojans are disguised as legitimate apps and pose a serious threat to Android users, with Malwarebytes detecting over 88,500 in 2023 alone.
Deception: They often masquerade as everyday apps like fitness trackers or QR readers or productivity or photography tools, making them difficult to identify.
Permissions Requests: Once installed, they request permissions like accessing photos or files, but use them to steal login details.
Sneaky Tactics: Some even hide their app icon on the home screen and download additional malware later, bypassing Google Play's security measures.
End Goal: Their ultimate aim is to steal your banking information and use it to make unauthorized money transfers.

The article emphasizes that vigilance is crucial, as these trojans are becoming increasingly sophisticated. It also references a recent Anatsa Trojan: https://www.techradar.com/pro/security/this-nasty-new-android-malware-can-easily-bypass-google-play-security-and-its-already-been-downloaded-thousands-of-times

top 9 comments

sorted by: hot top controversial new old

[–] [email protected] 27 points 8 months ago (1 children)

This seems more like an ad for Malwarebytes' premium service than an informational post.

[–] [email protected] 6 points 8 months ago (1 children)

Fuck malwarebytes forever. I'll never forgive them for not honoring my perpetual licenses that I purchased before they became subscription based all those years ago. I told them I was going to talk shit about them until the day I died, and I will keep that promise. I actually had to install malwarebytes the other day to try and fix a computer, malwarebytes itself is treading a fine line of being malware. It continually tells you you need to purchase a subscription, the app tries to get you to purchase a VPN through them, it gives random popups, I had no idea their service had gotten so bad.

[–] [email protected] 2 points 8 months ago

Yeah, I have not used Malwarebytes in years because it was obvious the quality has significantly declined.

[–] [email protected] 27 points 8 months ago* (last edited 8 months ago) (1 children)

Even after reading the key points it wasn't clear "how" they manage to do that. The article is not much more detailed, but at least mentions them exploiting android's accessibility services.

[–] [email protected] 11 points 8 months ago

I agree with you. The article give a good warning about downloading applications in general, but hand-wave how they escalated from "file/photo" access to capturing your data. The recent Anatsa malware's details seem to imply accessibility service. This is a Thread Fabric article about Anatsa malware: https://www.threatfabric.com/blogs/anatsa-trojan-returns-targeting-europe-and-expanding-its-reach

[–] [email protected] 9 points 8 months ago (1 children)

But I thought the data storage even if not encrypted (which afaik is standard as well) is now isolated for each app? And surely accessibility permissions are a separate category you have to grant also?

[–] [email protected] 3 points 8 months ago

Yeah, the app data are separated and inaccessible, unless specified by the developer. Accessibility service is a separate permission, and should almost never be asked or granted, where as file/photo accesses are more common.

[–] [email protected] 6 points 8 months ago (1 children)

Wait what... Who can login to the internet bank with just a user/password?

We've had MFA requirement here in Sweden since the early 00's...

[–] [email protected] 4 points 8 months ago* (last edited 8 months ago)

mean while 23andme gaslighting customers

👀