Android users are facing a serious threat as a number of apps have been found to contain dangerous banking malware, raising concerns among millions of users. These malicious apps were all located on the Google Play Store, making it easier for them to infect numerous smartphones. The discovery was made by Zscaler’s ThreatLabs team, who identified several apps harboring the Anatsa bug, a notorious malware capable of stealing credentials, logging keystrokes, and facilitating fraudulent transactions.
The Anatsa malware, which emerged in 2020, employs a deceptive technique known as a dropper, where it pretends to be a harmless application on the official Google Play Store. Once installed, Anatsa covertly downloads a malicious update from its command-and-control server, evading detection by Google Play Store’s security measures and successfully infiltrating devices.
In addition to Anatsa, other malware attacks have been reported. ThreatLabz flagged 77 malicious applications from various malware families to Google, including the Joker bug. This bug can perform alarming actions like reading and sending text messages, capturing screenshots, making unauthorized phone calls, and stealing contact lists. It has even been known to enroll affected users in premium services without their knowledge.
Zscaler emphasized the importance of scrutinizing app permissions and ensuring they align with the app’s intended functions before installation. Users are advised to check reviews, research developers, and enable Google Play Protect, a service that scans apps and devices for harmful behavior. Google Play Protect also conducts safety checks on apps before download, alerting users about potentially harmful ones and taking action to deactivate or remove them from devices.