Kalember added that if an Android user discovers the TangleBot malware and is somehow able to remove it, the attackers can still simply hold onto the stolen information without acting on it immediately, lulling victims into believing their information was not hacked. "Even if they don't do banking fraud right away, there might be lots of other ways to monetize those stolen credentials," he added. "The infected Android devices can be monetized in lots of different ways," Kalember said. Cloudmark analysts note "there is a growing market for detailed personal and account data" on the dark web. Hackers who steal identifying information in this manner often sell it online, rather than using it directly themselves. Once the malware is installed on the device, "it is pretty hard to remove it," according to Kalember and the stolen information can be monetized well into the future. "Like most pieces of mobile malware, it is relatively stealthy in terms of its appearance." "I would hope that would remember the Adobe Flash prompt but after that they probably won't see very much from TangleBot," Kalember said. These overlays are being used to hack banking credentials because the users might believe they are logging into their mobile banking while typing in their information on a fake screen, which then relays the information to the hackers. "What is making TangleBot fairly interesting right now is that they are using incredibly fresh lures that all map to the sorts of things that we're hearing about in the news with COVID, whether we are talking about the booster or other things that you are likely to see on the front page of whatever news site you go to," Kalember said.Īccording to Kalember, the TangleBot malware has the capability to show hacked users an "overlay" screen that appears authentic but is instead a fake window being run by attackers to steal information.
Prior to downloading the malware, users are warned by Android about the dangers of software from "unknown sources" and a series of permission boxes are displayed before the phone is infected. Kalember said the hackers have been using TangleBot for "weeks" and that the impact could potentially be "very widespread." However, Android does have some protections in place against the virus.
0 kommentar(er)
