DIGITAL LIFE

New destructive malware targets Android devices

Experts from the company ThreatFabric, which works in the area of ​​information security, reported the discovery of a new dangerous malware that threatens hundreds of popular applications for the Android mobile platform. This is BlackRock malware that can be used to steal credentials and payment information.
According to available data, BlackRock software belongs to the class of banking trojans, but can be used to steal confidential data from many popular applications, including PayPal, Gmail, Uber, eBay, Netflix, Amazon, Amazon, Telegram, WhatsApp, Skype , Twitter, Facebook, Instagram, Instagram, TikTok, YouTube, Tinder, Pinterest and others. In total, the malware compromises 337 popular applications for the Android mobile platform.
In the course of the BlackRock study, experts found that it is based on the code of the banking Trojan Xerxes, which is a type of LokiBot malware. The source code for the Xerxes software was published by its author in the middle of last year, so it is not surprising that someone has decided to create a new Trojan horse based on it.
To distribute BlackRock, attackers disguise it as a legitimate Google Update update package. After reaching the device, the trojan asks for permission to increase the level of rights in the system, after receipt, it can receive remote commands from intruders, working without additional interaction with the victim. And while the Trojan is primarily intended to steal payment data, it can be used to collect all types of sensitive information.
To protect BlackRock data, it is not necessary to remove popular applications from your smartphone. It is enough to carefully monitor what you download to the device. The malware in question was not seen in the official Play Store, which means that it spreads over third-party resources. Thus, downloading content from official sources will help protect the device from the negative effects of the BlackRock Trojan.

AVnews