{"id":48560,"date":"2022-09-22T20:15:34","date_gmt":"2022-09-22T20:15:34","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/check-out-this-android-spyware-says-microsoft-the-home-of-a-gazillion-windows-flaws\/"},"modified":"2022-09-22T20:15:34","modified_gmt":"2022-09-22T20:15:34","slug":"check-out-this-android-spyware-says-microsoft-the-home-of-a-gazillion-windows-flaws","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/check-out-this-android-spyware-says-microsoft-the-home-of-a-gazillion-windows-flaws\/","title":{"rendered":"Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws"},"content":{"rendered":"

Data-stealing spyware disguised as a banking rewards app is targeting Android users, Microsoft’s security team has warned.<\/p>\n

The malware, which can be remotely controlled by miscreants once it has infected a device, appears to be an updated version of an Android software nasty<\/a> first observed in 2021. Back then it was seen robbing Indian bank customers. This latest variant has several additional backdoor capabilities and much better obfuscation, allowing it to stealthily steal victims’ two-factor authentication (2FA) messages for bank accounts, account login details, and personally identifiable information (PII) without detection, we’re told.<\/p>\n

The Microsoft threat hunters’ investigation began after receiving a text message claiming to be from India’s ICICI bank’s rewards program. It included the bank’s logo, alerted the user that their loyalty points were about to expire, and instructed them to click on a malicious link.<\/p>\n