SharkBot is back and more dangerous than ever. This incredibly malicious malware, which is quite capable of stealing login credentials and banking information, has made an unwanted comeback on the Google Play Store, with thousands of people already under attack.
Cybercriminals have used a sneaky tactic to circumvent Google’s robust security, as the apps in question are only infected by SharkBot after being downloaded to a device.
Once installed, this bug can siphon money from bank accounts and overlay fake login pages when it detects that a user is trying to access online services that allow hackers to steal usernames and passwords. SharkBot last appeared in March and now two apps are using it again to attack Android fans.
As discovered by the Fox-IT team, apps called Mister Phone Cleaner and Kylhavy Mobile Security were both found to be infected with the malware.
READ MORE: Nokia is back with three new Android phones and a cheaper way to buy them
Google has since banned these apps, but anyone who has ever downloaded them needs to act fast or they will become the next victim of cybercrime.
Speaking about the attack, Alberto Segura of Fox-IT said: “This new version asks the victim to install the malware as a fake update to keep the antivirus protected against threats. We found two Active SharkbotDopper apps in Google Play Store, with 10K and 50K installs each.
“On August 22, 2022, Fox-IT’s Threat Intelligence team found a new sample of Sharkbot with version 2.25; communicating with the previously mentioned command and control servers. This version of Sharkbot introduced a new feature to fly the session cookies of the victims who connect to their bank account.”
If you think you have downloaded these apps, be sure to remove them without delay and check the permissions you may have granted them.
It’s also worth checking your bank account for any strange transactions.
HOW TO DELETE APPS ON ANDROID
• Open the Google Play Store app.
• At the top right, tap the profile icon.
• Tap Manage apps & devices. Manage.
• Tap the name of the app you want to remove.
• Tap Uninstall.