The Finnish government has one https://twitter.com/CERTFI/status/1786288335524110535 given for Android malware that steals money from bank accounts. The attack starts with a text message asking the recipient to call a specified phone number. The text message comes from different companies and concerns, for example, an outstanding account or strange matters with an account.
When victims call the “service number” provided, they are told that fraud has occurred and security measures must be taken. The victim is then sent a second text message linking to a “virus scanner”. In reality, it is an infected version of the McAfee Security app. This is also a ‘dropper’ that installs the final banking malware.
The warning does not mention which malware is involved, but at the end of March security company Fox-IT warned how the Vultur banking malware is spread via the above method. The Vultur malware gives criminals access to the phone to commit fraud and steal money from the account. In addition, the infected app also offers the functionality of McAfee Security, so that victims do not suspect anything.
The Finnish Transport and Communications Agency Traficom calls on Android users not to download apps outside the official app store. The regulator states that the malware only targets Android phones. In case users have installed the malware, it is advised to perform a factory reset.
Tags: Finnish government warns Android malware empties bank account
