Android malware targeting major banking and social media mobile apps
Cybersecurity experts are warning about new malware that can steal the login credentials from 94 million different mobile banking apps across Android. The malware masquerades as a Flash Player app which tricks users into granting it administrator rights. Then, when a banking app is opened, the malware creates a fake overlay, tricking victims into entering their login details. The fake Flash player can be uninstalled and its rights disabled, however.

Cybersecurity experts are warning about new Android malware that can steal the login credentials from 94 different mobile banking apps around the world.

The malware masquerades as a Flash Player app that, once installed, appears in a phone launcher, says Fortinet. If a phone owner launches the app they see a fake Google Play screen asking for permissions that grant the malware administrator rights.



Then, when a banking app is opened, the malware creates a fake overlay, tricking victims into entering their login credentials. Among the bank apps being targeted are those of NAB, ING Direct and Citi, as well as PayPal.



In addition, the malware is also taking aim at social media apps. When users launch Facebook, Whatsapp, Snapchat, Twitter, Instagram and more, they are faced with a screen overlay asking for payment card details.



Meanwhile, due to its ability to intercept SMS communications, the malware is also able to bypass SMS-based two-factor authentication.



Fortinet says users can disable the device administrator rights through their phone settings and then uninstall the fake Flash Player.