AN URGENT warning has been issued over a new mobile attack that allows hackers to hijack your bank accounts.
A dangerous new version of malware, or malicious software, allows criminals to see inside your banking apps and steal your money.
1
The new Android “Godfather” malware creates an isolated virtual environment on mobile devices, according to BleepingComputer.
Hackers can then steal your account data and transactions from legitimate banking apps.
Malicious apps are executed inside the controlled virtual environment enabling real-time spying, credential theft and transaction manipulation.
This can all happen when you’re none the wiser as it maintains perfect visual deception.
The tactic is similar to the FjordPhantom malware seen in 2023 but experts warn that the Godfather is much broader in scope.
It targets over 500 banking, cryptocurrency and e-commerce apps worldwide.
Zimperium, a world leader in mobile security, say that the level of deception is very high.
The user is able to see the real app but the Android protections don’t pick up the malicious operation underway.
Once active on the device, the malware checks for installed target apps and places them inside its virtual environment.
The malware tricks Android into thinking that a legitimate app is being run while actually intercepting and controlling it.
A victim will launch their banking app and see the real app interface but all of their sensitive data can easily be hijacked.
The Godfather malware can then record account credentials, passwords, PINS and capture responses from your bank.
This is because the malware tricks the victim by displaying a fake lock screen to trick them into entering their passwords and PIN numbers.
Once criminals have harvested that data, they can then trigger payments inside the real banking app.
The victim might see a fake “update” screen or a black screen to evade suspicion.
The Godfather malware was first discovered in March 2021 and has seen a significant evolution.
In December 2022, analysts found that it could target over 400 apps over 16 countries.
Although the campaign analysts spotted only targets a dozen Turkish banking apps, Godfather operators could opt to target over 500 apps worldwide.
To protect yourself it’s advised that you only download apps from Google Play or from app publishers you trust.
Android users should also ensure that Play Protect is active and pay attention to the requested permissions.
