{"id":45483,"date":"2022-02-22T16:20:17","date_gmt":"2022-02-22T16:20:17","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/33133\/Almost-100-000-New-Mobiles-Banking-Trojans-Discovered-In-2021.html"},"modified":"2022-02-22T16:20:17","modified_gmt":"2022-02-22T16:20:17","slug":"almost-100000-new-mobiles-banking-trojans-discovered-in-2021","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/almost-100000-new-mobiles-banking-trojans-discovered-in-2021\/","title":{"rendered":"Almost 100,000 New Mobiles Banking Trojans Discovered In 2021"},"content":{"rendered":"

Researchers have found almost 100,000 new variants of mobile banking Trojans in just a year.<\/p>\n

\n

ZDNet Recommends<\/span> <\/h3>\n<\/p><\/div>\n

As our digital lives have begun to center more on handsets rather than just desktop PCs, many malware developers have shifted part of their focus to the creation of mobile threats. <\/p>\n

Many of the traditional infection routes are still workable — including phishing and the download and execution of suspicious software — but cyberattackers are also known to infiltrate official app stores, including Google Play, to lure handset owners into downloading software that appears to be trustworthy.  <\/p>\n

This technique is often associated with the distribution of Remote Access Trojans (RATs). While Google maintains security barriers to stop malicious apps from being hosted in its store, there are methods to circumvent these controls quietly.  <\/p>\n

In 2021, for example, Malwarebytes found an app in Google Play disguised as a useful barcode scanner<\/a> with over 10 million active installs. While the app was submitted as legitimate software, an update was issued to the software after it had accumulated a huge user base turning the app into an aggressive adware nuisance.  <\/p>\n

The same tactic can be used to turn seemingly benign apps into banking Trojans<\/a> designed to steal your financial data and account credentials from online services. In the mobile world, theft can occur by redirecting users to phishing pages or by performing overlay attacks, in which a phishing window covers a banking app’s display. Trojans may also quietly sign up their victims to premium telephone services.<\/p>\n

Recent examples of Trojans ending up in Google Play include Joker<\/a> and Facestealer. <\/p>\n

According to new research published by Kaspersky<\/a>, 97,661 new mobile banking Trojan variants were detected in 2021, alongside 17,372 new mobile ransomware Trojans and a total of 3,464,756 malicious installation packages, .APKs that can be installed on jailbroken devices or those that accept apps from unknown developers.  <\/p>\n

The banking Trojans responsible for the most detected attacks over 2021 were Trojan-Banker.AndroidOS.Agent, Trojan-Banker.AndroidOS.Anubis, and Trojan-Banker.AndroidOS.Svpeng. <\/p>\n

\"screenshot-2022-02-22-at-09-58-43.png\"<\/span>