Connect with us

Hi, what are you looking for?

HEADLINES

More than half a million Android users compromised by financial malware

Be cautious when conducting financial transactions with your Android device. Malicious programs targeting Android-based devices in order to steal their owners’ money were used in 60% of attacks.

Be cautious when conducting financial transactions with your Android device. Malicious programs targeting Android-based devices in order to steal their owners’ money were used in 60% of attacks registered by Kaspersky Lab security products, according to the results of the “Mobile CyberThreats” survey carried out by Kaspersky Lab and INTERPOL between August 2013 and July 2014.

The fraudsters mostly targeted users in Russia, but Ukraine, Spain, the UK, Vietnam, Malaysia, Germany, India and France also faced attacks.

In absolute terms, there were more than 588,000 Android users worldwide who faced financial malware (Trojan-SMS and Trojan-Banker) during the reporting period. That is six times greater than the number from the equivalent period 12 months earlier.

KL&INTERPOL_mobile-cyber-threatsOverall, 57.08% of all reported incidents involved attacks utilizing programs from the Trojan SMS malware family. These are designed to send messages to short premium-rate numbers without the owner’s knowledge.

Russia was on the receiving end of the greatest number of Trojan SMS attacks with 64.42% of all Kaspersky Lab anti-virus detections registered on devices of users from this country. About a quarter of Trojan-SMS attacks were detected in Kazakhstan (5.71%), Ukraine (3.32%), Spain (3.19%), the UK (3.02%), Vietnam (2.41%), Malaysia (2.3%), Germany (2%), India (1.55%) and France (1.32%).

Advertisement. Scroll to continue reading.

Another 1.98% of attacks used Trojan-Banker malware which, when combined with Trojan-SMS functionality, can steal bank card data as well as usernames and passwords for online banking services.

Russia is on top of this chart as well with 90.58% of all Trojan-Banker detections registered on the territory of the Russian Federation.

The rest of the top 10 all had a relatively small level of attacks and included Kazakhstan, Ukraine, Belarus, USA, Lithuania, Azerbaijan, Bulgaria, Germany and Uzbekistan.

Although during the reporting period, Kaspersky Lab products registered relatively few attacks using mobile banking Trojans, the company’s experts found the number of mobile malware modifications grew sharply – from 423 in August 2013 to 5,967 in July 2014, a 14-fold increase.

Modifications are a version of a malicious program that is slightly altered from the original piece of malware.

Advertisement. Scroll to continue reading.

This small change can make the malware less noticeable to antivirus solutions. The high level of modification growth found during this study shows that cybercriminals were creating multiple variations of their malware in attempts to go undetected by antivirus solutions and infect as many devices as possible. Typically, antivirus companies will create a new signature within the software to defend against this type of tactic.

“A successful Trojan-Banker infection can give a fraudster access to all of the victim’s money, while a Trojan-SMS needs to infect dozens or even hundreds of devices to show a worthwhile profit. In addition, not all owners currently use mobile online banking applications. That’s why there is such a difference in the number of Trojan-SMS and Trojan-Banker attacks registered by our products”, said Roman Unuchek, senior virus analyst at Kaspersky Lab.

“During the past few years, we have witnessed the rise of mobile cyber threats which have become more complex and intelligent enough to target specific entities. With the mobile market growing exponentially, it is clearer that these threats are mutating to include new attack vectors allowing the exploitation of personal smart devices”, said Madan Oberoi, Director of Cyber Innovation & Outreach at INTERPOL’s Global Complex for Innovation.

Advertisement. Scroll to continue reading.
Advertisement
Advertisement
Advertisement

Like Us On Facebook

You May Also Like

HEADLINES

The attackers used a series of campaigns with novel exploits and customized malware to embed tools to conduct surveillance, sabotage and cyberespionage as well...

HEADLINES

Financial phishing attacks are rapidly increasing in the country as cybercriminals continuously evolve and adapt their tactics, making them sophisticated. The number of attacks...

HEADLINES

A Scale of Harm study by the International Justice Mission revealed that almost half a million Filipino children were trafficked to produce new child...

HEADLINES

Yondu launched an extensive, month-long cybersecurity awareness campaign focused on modern threat detection, incident response, and social engineering defense.

HEADLINES

The PLDT wireless unit is also calling on customers to report these messages to Smart’s HULISCAM portal for further action.

HEADLINES

Here are some tips from Sophos for staying secure online during the cybersecurity awareness month.

HEADLINES

While only 21% of hackers believed that AI technologies enhance the value of hacking in 2023, 71% reported it to have value in 2024....

HEADLINES

Kaspersky has enhanced its Kaspersky Industrial CyberSecurity (KICS), a native XDR Platform for industrial enterprises, and streamlined Managed Detection and Response (MDR) for Industrial...

Advertisement