Slashdot Mirror


Malware That Fakes Bank Login Screens Found In Google Ads (fastcompany.com)

tedlistens quotes a report from Fast Company: For years, security firms have warned of keystroke logging malware that surreptitiously steals usernames and passwords on desktop and laptop computers. In the past year, a similar threat has begun to emerge on mobile devices: So-called overlay malware that impersonates login pages from popular apps and websites as users launch the apps, enticing them to enter their credentials to banking, social networking, and other services, which are then sent on to attackers. Such malware has even found its way onto Google's AdSense network, according to a report on Monday from Kaspersky Lab. The weapon would automatically download when users visited certain Russian news sites, without requiring users to click on the malicious advertisements. It then prompts users for administrative rights, which makes it harder for antivirus software or the user to remove it, and proceeds to steal credentials through fake login screens, and by intercepting, deleting, and sending text messages. The Kaspersky researchers call it "a gratuitous act of violence against Android users." "By simply viewing their favorite news sites over their morning coffee users can end up downloading last-browser-update.apk, a banking Trojan detected by Kaspersky Lab solutions as Trojan-Banker.AndroidOS.Svpeng.q," according to the company. "There you are, minding your own business, reading the news and BOOM! -- no additional clicks or following links required." The good news is that the issue has since been resolved, according to a Google spokeswoman. Fast Company provides more details about these types of attacks and how to stay safe in its report.

1 of 120 comments (clear)

  1. Re: Boom, indeed by duke_cheetah2003 · · Score: 0, Flamebait

    Good luck with that, just hope you never get targeted by the cops. Note that you need not do anything wrong or illegal to be a target of civil forfeiture. Just carry around cash...

    I have no sympathy for idiots transporting large sums of cash. You're just an idiot if you do this. If you need to make a large transaction, get a frickin' cashiers check. Frankly, you're lucky if the cops are the ones who seize the moolah and let you walk. A criminal would shoot you dead, take your cash, your car and your phone.