Nasty Android banking Trojan wipes devices after data theft

Kaspersky’s security researchers warned in 2019 about a data-stealing Android trojan called BRATA. Now the malware is also popping up more and more in Europe. Customers of the banking app are being lured. The Trojan is particularly nasty. According to a new report from Bleeping Computer Online Magazine from. The Android malware known as BRATA has new and dangerous features in its latest version. It includes GPS tracking, the ability to use multiple communication channels, and a feature that performs a factory reset on the device to erase all traces of malicious activity. This makes the new version of the Android Trojan particularly dangerous. Infographic: These are the most successful subject lines in phishing BRATA was first discovered by Kaspersky in 2019. At that time, however, the Trojan was mainly out for mischief in Brazil. But that has now changed. Not only has BRATA become “smarter” and meaner, the malware is now also showing up in Europe.

Distribution of phishing and Trojan horses

According to Cleafy research, BRATA has also been found in the UK, Poland, Italy, Spain and China. The Trojans are distributed through phishing campaigns that specifically target bank customers. It is indicated that you must log in to your bank because a customer advisor has a question about a booking. Clicking on the link sent will, if run from a smartphone, lead directly to the Android Trojan. The first thing to do is spy on the bank’s credentials. But since the malware has evolved a lot in the years since it was first created, that’s not all. There is a new keylogging feature that complements the existing screen capture feature. There are several obfuscation tactics that successfully bypass antivirus detections. For example, BRATA wipes AV tools first and then the entire device at the end of the spying process to cover its tracks. The best way to avoid Android malware infection is to only install apps from Google Play Store and always scan them with AV tool before opening them. In addition, you should initially be careful with the requested permissions. See also: Google, Android, Hacker, Security, Malware, Virus, Trojan, Malware, Adware portal gda/Flickr



Source