Specialists from the Russian anti-virus company Dr.Web warned owners of smartphones with the Android operating system about the spread of the BankBot Trojan program.
According to experts, hundreds of free applications in the official Google Play store are infected with the virus.
How dangerous is the virus?
The BankBot virus controls infected smartphones and steals confidential information.
It is capable of stealing data from users’ bank cards and installed payment applications.
The Trojan can also control correspondence from the gadget in the applications WhatsApp, Viber, Messenger, Spanchat, Instagram, etc.
How does it do this?
The virus is downloaded onto a smartphone under the guise of a harmless application, after which it destroys its icon from the desktop and starts working in the background. It replaces the interface of other applications.
When you try to log in, BankBot displays a fake window asking you to grant it access to special features.
In this mode, intended for users with disabilities, programs can independently click on virtual buttons in dialog boxes and system menus. This is how confidential data gets to attackers.
Where is the virus spread?
Experts report that the threat is currently real for users from dozens of countries around the world. According to them, about 400 virtual market applications have already been infected with the virus.
How to protect yourself from the virus?
To avoid becoming a victim of a Trojan, it is recommended not to install suspicious applications and periodically scan your gadget with anti-virus programs.
In July 2017, Google introduced a set of Google Play Protect services designed to protect Android devices from malware. The company has begun remotely implementing this feature on Android devices running Google mobile services version 11 and higher. The creators promise that the technology will ensure the safety of user data by automatically and continuously checking the device and applications installed on it.