{"id":49517,"date":"2016-05-06T10:26:01","date_gmt":"2016-05-06T17:26:01","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=49517"},"modified":"2025-08-06T23:32:50","modified_gmt":"2025-08-07T06:32:50","slug":"fake-banking-app-android-malware","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/fake-banking-app-android-malware\/","title":{"rendered":"Phishing Goes Mobile: New Android Malware Hits Google Play"},"content":{"rendered":"

Sometimes, things just aren\u2019t as they seem to be. For example, last year, Google Play hosted a round of mobile games that were, in actuality, malicious applications. A lot of victims downloaded those supposed games and had their security compromised. It\u2019s a familiar, and often repurposed attack. It\u2019s also becoming increasingly common on mobile platforms, most recently surfacing through new Android malware.<\/p>\n

That\u2019s right: cybercriminals are adapting phishing attacks<\/a> \u2014 attacks that trick users into giving up personal or sensitive information by posing as a trusted service \u2014 to the mobile world<\/a>. They\u2019re doing so by developing and publishing faux applications and updates that closely mimic trusted services, even if those services don\u2019t normally have a mobile presence.<\/p>\n

In particular, we\u2019re seeing two types of attacks: one that comes in the form of downloadable applications and another in the form of corrupt \u201csoftware updates\u201d pushed onto victims if the right conditions are met. The former\u2019s malicious applications are so convincing in appearance that they bypass Google\u2019s vetting system for sifting legitimate from malicious apps. Conversely, the latter chooses to piggyback on the legitimacy of an authority \u2014 in this case, Google\u2019s authority over the Chrome mobile browser \u2014 in order to convince victims to download a malicious update package.<\/p>\n

So how are these attacks slipping through the cracks? Each style of attack has its own answer. In the threat involving disguised malicious apps, for example, the apps don\u2019t actually do anything malicious on their own<\/a>. Instead, they refer victims to well-crafted, lookalike login pages of banking and payment websites in order to collect credentials. The threat involving corrupt updates, as BGR reports<\/a>, prey on victims who\u2019ve disabled default security, posing as official app updates on phony sites. This threat also disables any existing security software on a victim\u2019s device.<\/p>\n

These are both scary, skillful ways cybercriminals can dodge malware detection while taking advantage of the trusted names used by banks, app stores and major software companies.<\/p>\n

While the malicious applications in question are targeting people who use digital banking and payments services for cryptocurrency<\/a> like Bitcoin, any mobile user could face these threats. This type of attack could easily be repurposed for other applications and, potentially, deliver greater damage.<\/p>\n

Tips to Make Sure Your Downloads are Legit<\/h2>\n

So how can you make sure the applications you want to download are legitimate? Here are a few tips:<\/p>\n