- Jul 22, 2014
- 2,525
The BankBot Android banking trojan is giving Google engineers headaches, as this particular piece of malware has a knack for avoiding Google's security scans and reaching the official Play Store on a regular basis.
The story of this banking trojan goes back to January 2017, when the source code of an unnamed Android banking trojan was leaked online on an underground hacking forum.
Shortly after, someone took this source code and created a new banking trojan known as BankBot, which by the end of the month, had already been used to target users of Russian banks.
By next month, February, BankBot's authors improved the malware's support with the ability to target the customers of banks in other countries, such as the UK, Austria, Germany, and Turkey.
BankBot has the ability to avoid Google's security scans
Despite basing BankBot on leaked source code, the malware's creators improved the codebase and added the ability to disguise the malware enough to trick the Google Bouncer security scanner.
In total, researchers initially detected three different BankBot campaigns that managed to upload Android apps on the official Google Play Store.
Google intervened in each and took down the apps, but it quickly became apparent to researchers that BankBot had Bouncer's number.
Two more campaigns detected last week
.. .
The story of this banking trojan goes back to January 2017, when the source code of an unnamed Android banking trojan was leaked online on an underground hacking forum.
Shortly after, someone took this source code and created a new banking trojan known as BankBot, which by the end of the month, had already been used to target users of Russian banks.
By next month, February, BankBot's authors improved the malware's support with the ability to target the customers of banks in other countries, such as the UK, Austria, Germany, and Turkey.
BankBot has the ability to avoid Google's security scans
Despite basing BankBot on leaked source code, the malware's creators improved the codebase and added the ability to disguise the malware enough to trick the Google Bouncer security scanner.
In total, researchers initially detected three different BankBot campaigns that managed to upload Android apps on the official Google Play Store.
Google intervened in each and took down the apps, but it quickly became apparent to researchers that BankBot had Bouncer's number.
Two more campaigns detected last week
.. .
