Hacker! This Android can Steal your Passwords and Files

Recently, security researchers discovered a new and far more potent variant of the Vultur malware, which uses the McAfee Security software on Android smartphones to collect private data such as credit card numbers, passwords, images, and other files.

Bleeping Computer claims that the malware has been active since it was discovered by the fraud detection company ThreatFabric in late 2022, when it was being disseminated through the Google Play Store. But a recent analysis from Fox-IT, a division of the NCC, has uncovered a more potent and covert strain of the virus.

 

What is Vultur, and how does it work?

Unaware Android users are receiving sporadic scam texts from con artists informing them that they have discovered an unauthorised transaction from their bank account and requesting that they contact a number to assist in resolving the issue.

A fraudster answers the phone at the number listed in the SMS, asking victims to download a virus-filled version of the McAfee Security program that contains the Brunhilda malware dropper. This scammer then sends out another SMS with a link. Installing the programme will cause the phoney McAfee Security to launch three payloads that grant it access to your device's ”Accessibility Services,” which will then create a connection with the malware’s central server.

Vultur will begin recording everything you do on your Android phone as soon as it obtains access to it. It will also track your passwords and enable remote takeover and monitoring of your device. It turns out that the updated Vultur also comes with some new features, such as the capacity to upload, download, delete, install, and locate files on your phone, block specific apps from opening, get beyond the lock screen, and even send personalised alerts to trick users.

 

How do I stay safe from banking trojans like Vultur?

Make sure you don’t download and install apps from URLs received over SMS or instant messaging services like WhatsApp unless they are from a reliable source if you want to protect yourself from Vultur or other similar Android viruses.

Giving an app the permissions necessary for its basic operation is another way to protect yourself. Most camera apps, for instance, simply require access to your files and camera. If an app requests access to your call history, there’s a good possibility it contains malware or is being used to sell your data.