19 April 2021

These Android apps are stealing bank accounts


Security researchers, Android apps that steal bank accounts discovered. Detected applications can remotely control users’ smartphones. Moreover, the applications themselves Google Play Protect they can hide from protection. In this way, they cannot be detected.

Do not download these Android apps!

Affiliated to the Check Point team the threat researchers discovered, Clast82 called. The threat was sent to devices using eight apps in the Google Play Store. AlienBot Banker and MRAT Installing their viruses. The victim’s phone, which is exposed to viruses, can be remotely controlled with the help of applications such as Teamviewer. Able to remotely control banking applications Clast82gives full access to the malware at this point.

The researchers made a statement on the subject; “The attacker gains access to the victims’ accounts and ultimately controls their devices completely. The attacker, who takes control of a device, is as if physically holding the device, installing a new application on the device, etc. can perform certain functions remotely. “ said.

List of Android apps that contain Clast82 virus:

Cake VPN (com.lazycoder.cakevpns)
Pacific VPN (com.protectvpn.freeapp)
eVPN (com.abcd.evpnfree)
BeatPlayer (com.crrl.beatplayers)
QR/Barcode Scanner MAX (com.bezrukd.qrcodebarcode)
Music Player (com.revosleap.samplemusicplayers)
tooltipnatorlibrary (com.mistergrizzlys.docscanpro)
QRecorder (com.record.callvoicerecorder)

Emphasizing that the specified applications should not be installed, the researchers said that they reported the situation to Google. As a result, the apps have been removed from the Google Play Store.

Currently, it is not possible to download these apps from the Play Store. But for the Android operating system outside the Google Play Store With the .apk method application can also be installed. So if you see the mentioned apps on apk download sites, definitely do not install them.


Leave a Reply

Your email address will not be published. Required fields are marked *