New malware stealing banking login information

Wow this is really Scary for android users. I'm in Georgia, and glad to be safe, although I use vpn for streaming, downloading, and making online transactions.

 

I don't use my phone or tablet for banking.

 

It does however require on social engineering to install it (i.e. tricking someone into downloading and installing an app from a dubious source). So the old mantra of think before you install still applies here.

 

Reading through the posted article, it ranks as 90% click bait/10% substance to me. Scare mongering in the news media is unfortunately the new norm.

 

Should my phone be wearing a mask?
Maybe two masks?

{sorry, just couldn't resist}

 

totally agree. though i think that it is worth mentioning that something like this exists......how many people will be affected by this attack? hard to say, but as long as you are using common sense you should be ok.

 

phishing attack -- send you an e-mail that looks like it came from the bank with a link to a login page that looks like the bank's but is controlled by the attacker. You try to log in, and now the attacker has your username/password.
1.Or they could get access to your e-mail account and do a password reset.
2.Or they could socially engineer access through the bank's support system.

 

None of these relate to Android malware though.

I don't see how accessing my email (if they got through the 2FA) would give them access to my bank - they won't find the details they need there. The others can be protected against if you are alert and educate yourself as to what scams are used. But honestly, anyone who doesn't know the rule "don't click on links in unsolicited emails" should not be banking online in the first place (you already know your bank's login, you should never need to follow a link. Frankly if the bank were serious about security they would never send you links).

 

Just stop and think before you click that link.

And don't click it anyway!