Malware Mimics Uber Android App to Steal Passwords

New Android malware imitates the Uber app in order to steal your login data

This malware is a version of FakeApp, now disguised by a fake Uber app overlay.

The Trojan malware, named "Android.banker.A9480", is created to steal personal data from users, Quick Heal Security Labs reports.

Uber issued a statement cautioning users from downloading apps from sources other than the Play Store but also assured them that in case they do make a mistake, the company has "a collection of security controls and systems in place to help detect and block unauthorized logins even if you accidentally give away your password".

The researchers at Symantec have discovered a malware that sneakily spoofs into the Uber Android app and harvests the passwords of the user accounts.

The report lists a number of targeted banking apps which, includes Axis Mobile, HDFC Bank MobileBanking, SBI Anywhere Personal, HDFC Bank MobileBanking LITE, iMobile by ICICI Bank, IDBI Bank GO Mobile+, Abhay by IDBI Bank, IDBI Bank GO Mobile, IDBI Bank mPassbook, Baroda mPassbook, Union Bank Mobile Banking and Union Bank Commercial Clients. Flash Player app is a popular target for cybercriminals.

Image Quick Heal
Image Quick Heal

Uber has spoken to Engadget about this matter and they mentioned that users would actually have to download an infected app in order for Fakeapp to take over the Uber app. In the background, the app carries out malicious tasks-it keeps checking the installed app on the victim's device and particularly looks for 232 apps (banking and some cryptocurrency apps). In that banking apps, there are few banks belongs to India.

Not only does the Android banking trojan collect all SMSs stored on a device, but also sets a device's ringer volume to silent to ensure users do not notice new notifications from banks. When the user goes to login with the information, it is sent to a remote server controlled by the attackers. The malicious program triggers a fake Uber app user interface which asks a victim to enter his or her login and password.

"Users are advised to avoid downloading apps from third-party app stores or links provided in SMS and e-mails to keep their credentials safe", Quick Heal Technologies Joint Managing Director and Chief Technology Officer Sanjay Katkar said. The malware tries to pass itself as the original Uber app but it is not available in the Google Play Store.

Install a reliable security app on your device and updating them regularly.

Bhansali's Padmavati gets U/A certificate from CBFC
The title of Padmavati is likely to be changed to Padmavat , the name of Malik Muhammad Jayasi's poem based on Rani Padmini . The board, however, suggested that the director change the title to Padmavat , besides making four other modifications.

Related News:



Most liked

HP recalls battery packs due to burn, fire hazards
We are taking immediate action to address this issue including a voluntary recall and replacement of the batteries. HP has announced a recall on batteries in select notebook and mobile workstations sold in recent years.

Lottery Jackpots rise to near record highs
Now, with the increased amount of numbers to pick from, I feel-and realistically so-that my chances are greatly diminished. This is still the fourth-largest jackpot in Mega Millions history and the 11th-largest jackpot in USA lottery history.

Jesse Lingard Scores Yet Another Screamer In United's 3rd Round Win
Rashford's finishing let the hosts' approach play down, though, when the striker skied over the bar after being played through. Manchester United had the first attempt on goal through captain Pogba firing a straight shot at Carson in the second minute.

Nintendo Switch officially now the fastest-selling video game console ever
As part of the announcement, the consolemaker also revealed a few impressive sales figures for a handful of first-party games. The company has now increased its internal target for its first-year sales of the Switch to 16 million from 10 million.

Apple acquires app development startup buddybuild
However, after the acquisition, the start-up would no longer offer Android and Free Starter services starting March 1. Stewart Butterfield has served as an advisor for the company, and Slack has become one of its more prominent clients.

FCC's Pai cancels CES appearance after receiving death threats
Chairman Ajit Pai , Commissioner Michael O'Rielly, and Commissioner Brendan Carr, all Republicans, voted in favor of repeal . However, two unnamed agency sources told Recode that Pai canceled his appearance after receiving death threats.

US Suspends Security Aid To Pakistan Over Terrorists
Allegations and denunciations were made by Bush regime as well as Obama regime and Pakistan was constantly asked to do more . Pakistan , which serves as a key transport route for supplies to USA forces in Afghanistan, denies harboring terrorists.

Game of Thrones Season 8 won't return until 2019
Showrunners David Benioff and DB Weiss announced in 2016 it would finish with 13 episodes spread over a final two seasons. If reports are to be believed, the episodes of the upcoming series will be longer compared to the previous ones.

Jessica Alba Welcomes Baby Boy on New Year's Eve
The image accompanying the happy message showed baby Hayes sleeping sweetly, wearing scratch mitts and a white onesie. Jessica Alba has announced the birth of her third child, baby boy named Hayes Alba Warren , after Haven and Honor .

Mega Millions jackpot at $361M for winning numbers drawing tonight
No one has hit the Mega Millions jackpot since October 13, 2017, while Powerball has not had a jackpot victor since October 25. With slightly better odds than the Powerball game, it's rare that months pass without someone winning a Mega Millions jackpot.

Paris Hilton Said 'Yas!'
Hilton celebrated their exciting news with photos of the proposal, and (more importantly) the ring on Instagram . Once the news broke, a source told Page Six , "They have never been happier and they make the flawless couple".

Serena loses in tennis return
Asked where she goes next after this short trip in Abu Dhabi, Serena replied: 'I don't know . I am taking it one day at a time. " I don't know if I'm totally ready yet or not".

Triple talaq bill to be introduced in Rajya Sabha today
He added, "Last week, the government introduced the Muslim Women (Protection of Rights on Marriage) bill, 2017, in the Lok Sabha". Though a few of the leaders belonging to the opposition parties voted in favour of the bill they also gave a few warning.

'Have heard IMA', says Nadda as doctors strike work
Lok Sabha Speaker Sumitra Mahajan has directed the panel to file its report before the Budget session. The doctor's strike has held against the new proposal of National Commission Bill.

LG Showcases The World's Largest (88-inch) & Highest Resolution (8K) OLED Display
Because OLED displays are self-emissive LG claims it has been able to achieve this without sacrificing brightness. We will have more details on the new 88-inch 8K OLED display when it is shown off at CES 2018 later this month.