[ad_1]
Android users are being warned about a new type of malware linked to the Chrome web browsing app that has the potential to take control of users’ phones and potentially access bank information.
The new malware, dubbed Brokewell, is reportedly masquerading as an update for Chrome.
Once downloadedmay allow cybercriminals access to sensitive personal data.
According to ThreatFabric, the computer support company that discovered and named the bug has “an extensive array of device takeover capabilities” and “poses a significant threat to the banking industry.”
Android users are warned to be vigilant and only download updates from official sources.
Brokewell reportedly uses techniques common to Android banking malware and “overlays a fake screen” to capture user credentials.
“Brokewell is equipped with ‘accessibility logging,’ (which) captures every event that happens on the device: touches, swipes, displayed information, text input, and open apps,” ThreatFabric said.
“All actions are logged and sent to the command and control server, effectively stealing any confidential data displayed or entered on the compromised device.
“Brokewell logs any event that poses a threat to all applications installed on the device.”
ThreatFabric warns that only robust, “multi-layered” fraud detection systems can counter malware like Brokewell.
The Australian Government Cyber Security Center advises Australians to carefully check privacy permissions when installing new apps on their device, especially for free apps.
It also urges users to install apps only from reputable vendors.
[ad_2]
