Two new threats have been identified ESET and informs them users how they can be safe by informing them about how they spread.
First, a fake application in Google app store, in the form of alleged aid for popular games such as'Cheats for Pou», «Guide for SubWay» and "Cheats for SubWay», managed to settle over 200.000 times in just one month, employing aggressive tactics advertisingwith appearances every 30-40 minutes.
The researchers ESET crawled applications as Android / AdDisplay.Cheastom, and report that they have developed numerous techniques to break detection by Google Bouncer - its technology Google which prevents malware from entering the store Google Play - while removing them becomes extremely complex. OR ESET informed her Google and these applications have been removed, but users have to be careful as experts expect other, similar attempts to breach the Bouncer.
More information and tips are available at analytical article at WeLiveSecurity.com.
Her researchers ESET they also identified one Trojan, by name Win32 /Brolux.A, which monitors 88 Japanese service websites Internet banking with the aim of attacking victims and stealing sensitive data.
The Brolux, which spreads through website with video for adults, exploits two sensitive spots that appear on computers with Windows without patch: a known vulnerability Flash (CVE-2015-5119) and a significant vulnerability Internet Explorer (CVE-2014-6332) from 2014, known as unicorn bugs.
The Trojan attacking users Windows and supports Explore, FireFox and Chrome, leading the victims to one σελίδα Phishing. The ironic thing is that this page warns the visitor about the risks of crimes related to it internet banking, asking him / her to register personal information on the pretext that he will use it FSA (Financial Services Agency) for further protection of the user, which the organization has defied.
In WeLiveSecurity.com, interested parties may seek more information in the article "Brolux banking Trojan targeting Japan; using Flash Feat leaked via Hacking Team hack to spread».
