Android users are facing a serious threat as a number of apps have been found to be spreading dangerous banking malware on devices. These apps, downloaded by millions of users, were all accessible on the Google Play Store, making it easier for them to infect smartphones.
The discovery of this threat was made by Zscaler’s ThreatLabs team, who identified several apps containing the harmful Anatsa bug. This malware, which emerged in 2020, has the capability of stealing credentials, logging keystrokes, and facilitating fraudulent transactions.
What makes this situation alarming is the method through which the malware infiltrates devices. Anatsa uses a deceptive technique where it initially appears harmless upon installation from an official Google Play Store decoy application. Subsequently, it discreetly downloads a malicious update from its command-and-control server, evading Google Play Store detection and effectively infecting devices.
In addition to Anatsa, other malicious attacks have been reported. ThreatLabz highlighted 77 malicious applications from various malware families to Google, including the notorious Joker bug. The Joker bug has the ability to read and send text messages, capture screenshots, make unauthorized calls, steal contact lists, and enroll users in premium services without their knowledge.
Zscaler emphasized the importance for Android users to carefully review app permissions and ensure they are aligned with the app’s intended functionality. It is advisable to check reviews, research developers, and activate Google Play Protect, a service that monitors apps and devices for harmful behavior, conducts safety checks on apps before download, and alerts users about potentially harmful apps.
By exercising caution and following these security practices, users can protect their devices from malware threats and safeguard their personal information.