Bank-hacking Android app should be deleted off phones immediately - warns Google
dailystar.co.ukthat compromises data and steals money from unknowing users.The vicious app, called 2FA Authenticator, replicates a legitimate 2FA app.
It is designed to look believable and like it offers real safety solutions for users.The dangerous, bogus app was already downloaded by over 10,000 people when Google Play Store urgently pulled it offline in mid January.However some unlucky users might still have the app downloaded on their phones, the malware working to steal banking data from within their apps silently and stealthily.The mobile security investigators Praedo took a close look at the app and found the terrifying, well-concealed banking malware had been stealing financial data from victims.
Taking a multi-pronged approach, the fake 2FA Authenticator app steals data in a clever and underhand way.Firstly, it gathers a list of installed apps and collects data locations from the device.
Under the guise of updates, it then disables the keylocks and works to remove any password and security checks.The malware works secretly on the phone, even when the user has switched off the device.It will then hone in on compromised banking apps using Vultur, an advanced and relatively new kind of malware that targets online banking to steal financial information.
Read more on dailystar.co.uk
