New malware last-browser-update.apk steals banking credentials

Question

---

New malware last-browser-update.apk steals banking credentials

---

Answer 1

---

A few hours ago the security company Kaspersky reported the appearance of a new potentially dangerous malware capable of stealing our banking data. This new malware is recognized by the name last-browser-update.apk and is detected as Trojan-Banker.AndroidOS.Svpeng.q by the antivirus.

What is really dangerous about this malware is that it has been specifically designed to steal bank credentials. We all know that most online banking services need some type of verification via SMS, but this is not enough for this malware, as it is able to read our messages to steal the verification codes.

New malware last-browser-update.apk steals banking credentials.

As indicated by Kaspersky , the last-browser-update.apk malware is distributed through websites with Google Adsense. Once installed it is able to disappear from the list of installed applications and remains hidden. It is difficult to detect because it is also able to erase the verification SMS and erase all traces of activity.

The Trojan is downloaded automatically, you just have to visit the infected page. Once installed, the malware itself gets administrator permissions on our Android device, which makes it easier for it to go unnoticed. It uses phising, posing as our bank and thus be able to steal the necessary data.

By using Google Adsense as a distribution network, it is really difficult to locate affected websites, since any website that uses this means of advertising is likely to show an ad that redirects us to the infected website. Remember that Google Adsense is the most widespread advertising network on the internet and that any user can register and start using it immediately.

The good news is that at the moment it seems that the banking malware of the Svpeng family is only being distributed in Russia, but it is not excluded that it will spread to other regions. As security tips, the ideal is not to install any application that does not come from Google Play and the use of an antivirus if we suspect that we are infected can help us.

---