The SharkBot banking Trojan appears to be back on the Google Play Store, disguised as an antivirus application and a cleaning application.
So think before you download such applications to clean your phones or "protect" them from viruses.
Fox-It had originally discovered the SharkBotDropper on Google Play Store τον Φεβρουάριο του 2022. Το Trojan ήταν ξανά μεταμφιεσμένο σε ψεύτικο antivirus για Android. Now researchers have discovered a new version of this dropper in the Google Play Store.
The new dropper does not ask for permissions to automatically install the Sharkbot malware, researchers report.
Instead, this new version of the Trojan asks the victim to install the malware as a fake antivirus update, to stay protected from threats.
The researchers discovered two SharkbotDopper apps on the Google Play Store, installed 10.000 and 50.000 times respectively. The apps in question are: “Mister Phone Cleaner” and “Kylhavy Mobile Security,”
Οι εφαρμογές έχουν συνολικά 60.000 εγκαταστάσεις από χρήστες στο Ηνωμένο Βασίλειο, την Ιταλία, την Ισπανία, την Αυστραλία, την Πολωνία, τη Germany, τις ΗΠΑ και την Αυστρία.
