{"id":93318,"date":"2018-12-19T16:39:12","date_gmt":"2018-12-20T00:39:12","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=93318"},"modified":"2025-08-19T08:13:23","modified_gmt":"2025-08-19T15:13:23","slug":"fake-apps-and-banking-trojans","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/fake-apps-and-banking-trojans\/","title":{"rendered":"Fake Apps & Banking Trojans Are Cybercriminal Favorites"},"content":{"rendered":"

Today, we are all pretty reliant on our mobile technology. From texting, to voice messaging, to mobile banking, we have a world of possibilities at our fingertips. But what happens when the bad guys take advantage of our reliance on mobile and IoT technology to threaten our cybersecurity? According to the latest McAfee Labs Threats Report<\/a>, cybercriminals are leveraging fake apps and banking trojans to access users\u2019 personal and financial information. In fact, our researchers saw an average of 480 new threats per minute and a sharp increase in malware targeting IoT devices during the last quarter. Let\u2019s take a look at how these cyberthreats gained traction over the past few months.<\/p>\n

While new mobile malware declined by 24% in Q3, our researchers did notice some unusual threats fueled by fake apps. Back in June, we observed a scam where crooks released YouTube videos with fake links disguised as leaked versions of Fortnite\u2019s Android app<\/a>. If a user clicked on the link to download this phony app, they would be asked to provide mobile verification. This verification process would prompt them to download app after app, putting money right in the cybercriminals\u2019 pockets for increased app downloads.<\/p>\n

Another fake app scheme that caught the attention of our researchers was Android\/TimpDoor. This SMS phishing campaign<\/a>\u00a0tricked users into clicking on a link sent to them via text. The link would direct them to a fabricated web page urging them to download a fake voice messaging app. Once the victim downloaded the fake app, the malware would begin to collect the user\u2019s device information. Android\/TimpDoor would then be able to let cybercriminals use the victim\u2019s device to access their home network.<\/p>\n

Our researchers also observed some peculiar behavior among banking trojans, a type of malware that disguises itself as a genuine app or software to obtain a user\u2019s banking credentials. In Q3, cybercriminals employed uncommon file types to carry out spam email campaigns, accounting for nearly 500,000 emails sent worldwide. These malicious phishing campaigns used phrases such as \u201cplease confirm\u201d or \u201cpayment\u201d in the subject line to manipulate users into thinking the emails were of high importance. If a user clicked on the message, the banking malware would be able to bypass the email protection system and infect the device. Banking trojans were also found using two-factor operations in web injects, or packages that can remove web page elements and prevent a user from seeing a security alert. Because these web injects removed the need for two-factor authentication, cybercriminals could easily access a victim\u2019s banking credentials from right under their noses.<\/p>\n

Tips to Avoid Potential Threats<\/h2>\n

But don\u2019t worry \u2013 there\u2019s good news. By reflecting on the evolving landscape of cybersecurity, we can better prepare ourselves for potential threats. Therefore, to prepare your devices for schemes such as these, follow these tips:<\/p>\n