CloudSEK identifies Android malware operation targeting Indian bank customers
Cybersecurity researchers at CloudSEK have identified MR ROBOT, an Android Malware-as-a-Service (MaaS) operation that allows fraudsters to generate fake banking applications, steal one-time passwords (OTPs) and redirect victims’ phone calls.
The operation provides affiliates with a control panel to select banks to impersonate and distribute fraudulent applications through links shared on WhatsApp, SMS and Telegram. According to CloudSEK’s investigation, the platform also supports fake payment applications and traffic-fine pages designed to collect personal and financial information.
Researchers traced the operation while investigating an Android application impersonating a public-sector bank. Their analysis of the malware’s administrative application led them to the platform’s control panel and a Telegram bot called APK Shield, which provides access to its catalogue of fraudulent applications.
Crimeware platform offers bank-specific fake apps
MR ROBOT operates through a subscription-based model in which customers, referred to as affiliates, can select a target bank from a dropdown menu in the...
Copyright of this story solely belongs to www.expresscomputer.in. To see the full text click HERE
