Malware News Android Virus Can Steal Passwords, Credit Cards, and Contact Lists

[Bot]

Android users are being targeted by a new form of malware flagged by security company Dr. Web as Android.BankBot.211.origin, which attempts to extract financial data from a phone, but also benefitting from capabilities that make it possible to target other details as well, including contact lists and text messages.

The malware spreads using the name of very popular programs, like Adobe Flash Player, though it’s important to know that BankBot hasn’t made it to the Google Play Store. This means that unless you download APKs from malicious sources, you should be completely safe, so double-check every package that you get from links that you don’t trust.

The security firm says the malware uses Android’s Accessibility Service to take over the phone, displaying a request prompt that would allow it to add itself to the device administrator list and become the default message manager.

Once the takeover is complete, BankBot can send an SMS containing a specific text to any number, extract text messages and send them to the hacker, open links, change the address of the company center, steal data like phone call info, contact lists and installed apps, and take screenshots of your passwords whenever you start typing them on websites.

Read more: Android Virus Can Steal Passwords, Credit Cards, and Contact Lists