Malicious Android Trojan on Banking, Shopping and Crypto Wallet Apps Targets US and Spain Users

[ad_1]

Android Trojan Malware that goes by the name of SOVA found on crypto banking, shopping and wallet apps is currently targeting users in the United States and Spain.

(Photo: by Adam Berry / Getty Images) BERLIN, GERMANY – SEPTEMBER 26: A visitor walks past an image of the Brandenburg Gate with the logo of the Android operating system on September 26, 2012 in Berlin, Germany. BERLIN, GERMANY

According to Threat Post, the new Android malware hit Android apps last August, noting that it could potentially be “the most feature-rich market.”

The name of Android banking malware SOVA means owl in Russian.

It should be noted that the new Android Trojan is still in its infancy. Thus, the real extent of the banking malware has not yet been revealed.

On September 10, the SOVA malware already released its second version, after its first appearance last August.

However, the malware is still in its testing phase. Having said that, the serious detrimental effects of the Trojan will emerge in the near future.

Android Trojan malware

According to Cyber ​​Security News, the latest Android Trojan allows criminal minds to use it as a tool to successfully extract personal data from its victims’ devices, which includes sensitive information such as bank credentials. .

The POS further revealed that the SOVA Trojan lurks under banking apps, e-commerce platforms, and even cryptocurrency wallets using it as a disguise.

Notably, these platforms require users to share their bank login credentials, which allows malicious actors to steal money or sell sensitive data to other criminals for profit.

Android malware further takes hold of a user’s personally identifiable information by infiltrating Android’s accessibility services, allowing the virus to pass through the necessary permissions to steal information.

Android Trojan malware features

What sets the latest Android malware apart from other Trojans are its many features, including credential theft, notification hiding, typing note taking, clipboard management for copy crypto wallet addresses and even access to session cookies.

Thanks to these features, SOVA can perform several specific functions inside the victim’s Android device, such as sending SMS, masking SMS interception, masking notification interception.

Not to mention that the malware could also uninstall an app, steal data from the device, and install a keylogger.

In addition, the malware also defends itself against the victim’s attempt to uninstall the application containing the SOVA Trojan. Thus, making its removal a difficult task.

Also Read: FlyTrap Malware Threatens Facebook Hackers Via Android Devices, Here’s How To Avoid It

Roadmap for Android Trojans

As mentioned, the SOVA Trojan is still in its infancy. That said, malware developers are still working on features that they have already defined on their roadmap.

In the future, the new Trojan horse malware could include additional features that would further incentivize malicious actors to steal sensitive data from their victims’ smartphones.

Some of the upcoming functions are two-factor authentication interception, manipulation or clipboard, and automatic cookie injections.

Elsewhere, another Android banking malware forces its users to provide their bank credits.

In other related news, the famous Joker malware prevails with its malicious scheme on Android devices.

Related article: Hacking WhatsApp Mods: Triada Trojan May Interfere With User Experience – How To Avoid This Malware?

This article is the property of Tech Times

Written by Teejay Boris

2021 TECHTIMES.com All rights reserved. Do not reproduce without permission.

[ad_2]