CERT In Says Mobile Banking Android Malware 'EventBot' Horsing Around in Cyberspace
CERT-In Says Mobile Banking Android Malware 'EventBot' Horsing Around in Cyberspace 4r15g
A Trojan is a virus or malware that cheats a victim to stealthily attack its computer or phone-operating system. 3z1w6q
By Press Trust of India | Updated: 15 May 2020 00:50 IST
The cyber security agency has suggested certain counter-measures to check the virus in Android phones 45o3d
Highlights
CERT-In is the national technology arm to combat cyber attacks
The cyber security agency has suggested certain counter-measures
It also asked s to avoid using unsecured, unknown Wi-Fi networks
ment
A mobile banking malware called "EventBot", which steals personal financial information, may affect Android phone s in India, the federal cyber-security agency has said in a latest advisory.
The Adobe Flash, and others using third-party application ing sites to infiltrate into victim device".
A Trojan is a virus or malware that cheats a victim to stealthily attack its computer or phone-operating system.
"It has been observed that a new Android mobile malware named EventBot is spreading.
"It is a mobile-banking Trojan and info-stealer that abuses Android''s in-built accessibility features to steal data from financial applications, read SMS messages and intercept SMS messages, allowing malware to by two-factor authentication," the CERT-In advisory said.
The Computer Emergency Response Team of India (CERT-In) is the national technology arm to combat cyber attacks and guard the Indian cyber space.
"EventBot", it said, targets over 200 different financial applications, including banking applications, money-transfer services, and cryptocurrency wallets, or financial applications based in the US and Europe region at the moment but some of their services may affect Indian s as well.
The virus "largely targets financial applications like HSBC UK, TransferWise, Coinbase, paysafecard etc.," the CERT-In said.
The agency said while "EventBot" has not been "seen" on Google Play Store till now, it can "masquerade" as a genuine mobile phone application.
"Once installed on victim''s SMS messages, and continue running and accessing data in the background," the advisory explained.
The virus further prompts the s to give access to their device accessibility services.
"Also, it can retrieve notifications about other installed applications and read contents of other applications.
"Over the time, it can also read Lock Screen and in-app PIN that can give attacker more privileged access over victim device," the advisory said.
The cyber-security agency has suggested certain counter-measures to check the virus infection into Android phones:
"Do not and install applications from untrusted sources like unknown websites and links on unscrupulous messages; install updated anti-virus solution; prior to ing or installing apps (even from Google Play Store), always review the app details, number of s, reviews, comments, and the ''additional information'' section.
Exercise caution while visiting trusted/un-trusted sites for clicking links; install Android updates and patches as and when available; s are advised to use device encryption or encrypting external SD card feature available with most of the Android operating system."
It also asked s to avoid using unsecured, unknown Wi-Fi networks and for prior confirming of a banking/financial app from the source organisation.
"Make sure you have a strong artificial intelligence (AI) powered mobile antivirus installed to detect and block this kind of tricky malware if it ever makes its way onto your system," the advisory states.
Which is the bestselling Vivo smartphone in India? Why has Vivo not been making phones? We interviewed Vivo's director of brand strategy Nipun Marya to find out, and to talk about the company's strategy in India going forward. We discussed this on Orbital, our weekly technology podcast, which you can subscribe to via Apple Podcasts or RSS, the episode, or just hit the play button below.