Faketoken malware reported to be targeting ride-hailing services
Trojan virus Faketoken is exploiting ride-hailing and ride-sharing apps to steal the credentials of some Russian users, Moscow-based cybersecurity firm Kaspersky Lab has said. The trojan overlays a phishing window on certain live apps and then records a user's keystrokes. The modification steals incoming SMS messages, such as one-time verification passwords sent by a bank, by redirecting them to its command and control servers. Kaspersky's researchers have also found Faketoken attacks on travel and hotel booking apps, Android Pay and Google Play Market.

Trojan “Faketoken” has resurfaced which is able to steal credentials from popular taxi applications and ride-sharing apps. Trojan “Faketoken” has resurfaced which is able to steal credentials from popular taxi applications and ride-sharing apps.

A new modification of notorious mobile banking Trojan “Faketoken” has resurfaced which is able to steal credentials from popular taxi applications and ride-sharing apps, Moscow-based cybersecurity firm Kaspersky Lab said on Friday.

“The new version of ‘Faketoken’ performs live tracking of apps and, when the user runs a specified app, overlays this with its phishing window to steal the bank card details of the victim,” Kaspersky Lab said in a statement.

The trojan virus has an identical interface, with the same colour schemes and logos, which creates an instant and completely invisible overlay.