13 February 2016

Korean banks under siege from Android malware

27 June 2014  |  8146 views  |  0 web spider

Banking Trojans masquerading as Android mobile apps are spreading like wildfire through the smartphones of Korean users, with up to 100,000 devices so far infected.

The Security Research Lab of Cheetah Mobile says the Trojan pretends to be a popular game or tool on one of the many third party Android markets in Korea with the intention of tricking the user into downloading it.

After installation, the virus searches for banking apps on the phone and alerts the user to a bogus update. Once the update is approved, the official app gets deleted and is replaced with a convincing copy. It then asks for the password for the user's security certificate, which is required by the South Korean government in order to access official online services in the country.

The fake app then proceeds to ask for the user's personal banking data - including account numbers, passwords and card security data - before closing with the message "No Wi-Fi connection. Use 3G or try to connect to the W-Fi again." The malware then shuts down the application and proceeds to remove all traces of itself from the device.

More than 2000 variations of the malware have been detected by CM Security researchers, with more than 3000 Korean smartphones infected in the last week alone.

Comments: (0)

Comment on this story (membership required)
Log in to receive notifications when someone posts a comment

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board, sign up now.

Related blogs

Create a blog about this story (membership required)

Related stories

17 June, 2014
04 March, 2014
27 February, 2014
11 December, 2013
16 May, 2013
06 July, 2010

Top topics

Most viewed Most shared
UK sets out open banking API frameworkUK sets out open banking API framework
15945 views comments | 102 tweets | 89 linkedin
Deutsche Bank calls for co-operation with fintech firms on B2B servicesDeutsche Bank calls for co-operation with...
8812 views comments | 29 tweets | 30 linkedin
How to accelerate your fintech startupHow to accelerate your fintech startup
8462 views comments | 35 tweets | 9 linkedin
Is Paym a failure?Is Paym a failure?
7059 views 16 comments | 23 tweets | 16 linkedin
Visa issues API to offer consumer control over card transactionsVisa issues API to offer consumer control...
6461 views comments | 17 tweets | 28 linkedin

Featured job

£100,000 basic, £180,000 OTE + Benefits

Find your next job