Android Trojan targets 94 wallets and 110 cryptocurrency exchanges

called Godfather, a trojan is worrying Android smartphone users. According to research firm Cyble, the malware steals sensitive data such as messages and data from other apps.

Some of the trojan targets are wallet apps and cryptocurrency exchanges, but they also threaten banking apps. In total, the Trojan is estimated to have already infected 215 banking applications, 94 wallets and 110 brokers.

“Cyble analyzed GodFather, an Android malware that masquerades as the MYT app to steal users’ confidential information.”

Continuing with the information, the company notes that the malware uses encryption techniques to avoid being detected by an antivirus program. As well as pointing out that the same is true of a very popular music app in Turkey, a country where Bitcoin has gained strong adoption due to the devaluation of its local currency, the Turkish lira.

🇧🇷[O GodFather] Steal sensitive data such as text messages, basic device data including installed app data and phone number of the device’points to Cycle. “In addition, it can also control the device’s screen using VNC, forward incoming calls from the victim’s device, and inject bank URLs.”

Trojan disguised as another app available on the Google Play Store. Source: Cycle/Reproduction.

Despite the fact that it is spreading rapidly in Turkey, it is also noticeable that the malware is targeting other regions such as France, the United Kingdom, Spain, Canada, Germany and the United States. So far there is no information about Brazil.

How to prevent trojans and malware?

Recommendations from Cyble, the intelligence firm that warned about the GodFather trojan, are as follows. Only download apps from official Google and Apple storesuse a good antivirus and strong passwords🇧🇷

After this, it also recommends taking precautions for app permissions and always keep the operating system up to date🇧🇷 Finally, it also reminds people never click on links you receive by text message🇧🇷

Since such malware is very good at hiding on the victim’s device, Cyble claims that users can monitor data usage of Wi-Fi or mobile connections, looking for suspicious usage.

If your smartphone is infected, it is recommended to reset it to factory settings, as well as change passwords for other services and changes in 2FA.

While the company has not named the more than 400 infected apps, including cryptocurrency wallets and exchanges, this is a worrying number. After all, that covers a large part of the market.

Source: Live Coins

follow:
\