If you have an Android phone in your pocket including models made by Samsung and Google you need to take extra care. Security experts at ThreatFabric say they have recently uncovered a new type of malware and if it happens to infiltrate your device it could be costly. The new bug, which is called Brokewell, is fully capable of taking over smartphones, watching what being typed in on the screen and even accessing personal banking details.
It’s a major worry with ThreatFabric saying Brokewell “poses a significant threat to the banking industry.”
Once installed, this attack is able to perform all kinds of crafty tricks in a bid to steal passwords and then your money.
“Brokewell uses overlay attacks, a common technique for Android banking malware, where it overlays a bogus screen on a targeted application to capture user credentials. Additionally, Brokewell can steal cookies, another feature common in modern mobile banking malware,” ThreatFabric confirmed.
So how is it getting on devices and how can you stop becoming the next victim?
Most Android users will now be well aware of the endless “dodgy” apps that are available on the web. Most have now wised up to this type of attack which is why crooks are now using a very different tactic.
It appears that Brokewell is being distributed via fake Chrome browser downloads which pop up when surfing the web. To try and up their success rate, criminals have made sure the upgrades look incredibly real.
In fact, images released by ThreatFabric show the official-looking download which appears just like those pushed out by Google. This makes it really tough to spot as, to the untrained eye, it all seems like an innocent piece of software. It’s now vital Android users stay aware and only download browser updates from official sources, such as Google.
If you suddenly get a pop-up window asking you to update your Chrome browser, think twice before you tap the install button
“Malware families like Brokewell pose a significant risk for customers of financial institutions, leading to successful fraud cases that are hard to detect without proper fraud detection measures,” ThreatFabric added.
If you think you may have already been a victim, reset your phone and keep a close eye on your bank account. Report anything suspicious to your account provider immediately.
