New Android malware stealing financial data from users in India: Quick Heal | Tech News

New Android malware stealing financial data from users in India: Quick Heal

The two new Android malware are said to appear in the form of notifications from WhatsApp, Facebook, and banking apps as well.

By: INDO ASIAN NEWS SERVICE
| Updated on: Aug 19 2022, 23:22 IST
Mobile service providers have consistently pointed the hurdles faced by them in installing towers and getting right of way, which is critical to avoid call drops. (Representative Photo)
Mobile service providers have consistently pointed the hurdles faced by them in installing towers and getting right of way, which is critical to avoid call drops. (Representative Photo)

Two new sophisticated Android Banking trojan viruses are exploiting mobile users' behaviour in India to gain access to their confidential data, global IT security firm Quick Heal warned on Tuesday.

Security experts at Quick Heal Security Labs have detected "Android.Marcher.C" and "Android.Asacub.T" -- the two trojans that imitate notifications from popular social applications such as WhatsApp, Facebook, Skype, Instagram and Twitter as well as some of the leading banking apps in India.

You may be interested in

MobilesTablets Laptops
7% OFF
Apple iPhone 15 Pro Max
  • Black Titanium
  • 8 GB RAM
  • 256 GB Storage
28% OFF
Samsung Galaxy S23 Ultra 5G
  • Green
  • 12 GB RAM
  • 256 GB Storage
Google Pixel 8 Pro
  • Obsidian
  • 12 GB RAM
  • 128 GB Storage
Apple iPhone 15 Plus
  • Black
  • 6 GB RAM
  • 128 GB Storage

By gaining access to incoming messages through administrative privileges, these malware also allow hackers to bypass the two-factor OTP authentication typically used for securing online transactions in India, the researchers warned.

Also read
Looking for a smartphone? To check mobile finder click here.

"Indian users often download unverified apps from third-party app stores and links sent through SMS and email. This gives hackers a lucrative opportunity to steal confidential information from unsuspecting users," said Sanjay Katkar, Co-founder and CTO, Quick Heal Technologies Limited.

"The fact that we've detected three similar malware in less than six months indicates that hackers are now targeting mobile users, who are far more vulnerable to sophisticated phishing attacks," he added.

While "Android.Marcher.C" uses the Adobe Flash Player icon to look like a genuine app, "Android.Asacub.T" mimics an Android Update icon.

Whenever users access an app on the database of these malware, they are tricked into entering sensitive information such as banking credentials, card details, and login IDs/passwords before they can continue using the app.

This is not the first time that Quick Heal Security Labs has detected such a malware. The researchers previously raised an alert in January this year about a similar Android Banking Trojan.

Known as "Android.banker.A2f8a", the malware was distributed through a fake Flash Player on third-party app stores and mimicked more than 232 banking and cryptocurrency apps.

The security researchers have recommended Android users to avoid downloading apps through third-party app stores or through links provided in SMS and email.

"Always keep 'Unknown Sources' disabled, and verify app permissions before installing any app from official stores," the security firm said.

Users must also keep their Google Play Protect service always 'ON' and install a reliable mobile security app to detect and block fake/malicious apps, it added.

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

First Published Date: 13 Jun, 12:32 IST
NEXT ARTICLE BEGINS