InfoSecBulletin Cybersecurity for mankind
An Android malware campaign that targets banks has upgraded its capabilities and added more ways to avoid detection.
A new report from Zimperium found over 200 harmful apps related to a malicious operation. The report also mentions that the threat actor has been carrying out phishing attacks on financial institutions.
Microsoft Uncovers Flaws in Rockwell Automation PanelView Plus
Researchers detect 28 new Ransomwares in June
Vote for DHAKA, Vote for ISACA at 6 July
Google to pays $250,000 for KVM zero-day vulnerabilities
Brain Cipher Ransomware to Release Decryption Keys free for Indonesia
0-click Account Takeover via Google Authentication
multiple vulnerabilities found in apache HTTP server
Australian four major banks raised alarm on cyber ‘warfare’
CVE-2024-20399: Cisco NX-OS Vulnerability Under active Attack
NCSA to do maximum work with limited manpower: DG Kamruzzaman
ALSO READ:
The campaign was discovered in July 2023 by Sophos. They found 40 apps that were stealing information from customers of 4 Iranian banks.
The primary goal of the bogus apps is to trick victims into granting them extensive permissions as well as harvest banking login credentials and credit card details by abusing Android’s accessibility services.
“The corresponding legitimate versions of the malicious apps are available at Cafe Bazaar, an Iranian Android marketplace, and have millions of downloads,” Sophos researcher Pankaj Kohli said at the time.
“The malicious imitations, on the other hand, were available to download from a large number of relatively new domains, some of which the threat actors also employed as C2 servers.”
“Some of these domains were found to serve HTML phishing pages aimed at extracting credentials from mobile users.” To read the full report click here.
