SharkBot: these antiviruses hide malware!

Ever since the invention of money, some have made it their specialty to find ways to steal it from those who possess it. With the technological evolution through the centuries, thieves have always shown to be very adept at adapting to the world around them. Since the advent of the Internet and smartphones, hackers have competed in ingenuity to siphon off the bank accounts of innocent victims who, in addition, really see nothing coming. After Xenomorph, it’s the turn of SharkBot, one of the most cynical malware on the marketto hit the headlines.

SharkBot: your best enemy

SharkBot had already been talked about last year and it has been back in force lately with a new version. It has in fact been detected in Google Play Store apps. The height of cynicism, the programs that serve as its cover, such as Antivirus Super Cleaner, Super Cleaner, Atom Clean-Booster, Alpha Antivirus, Powerful Cleaner, are intended to protect you from malware and to secure and protect your data. We don’t know if we should applaud this audacity or not and we can well imagine the diabolical laughter that the pirates must have pushed when they had this very vicious idea. What is certain is that the form does not change the fact that the virus has terrible consequences on the poor victims who had the misfortune to install them on their device. The apps containing it have been downloaded tens of thousands of times. Difficult in addition to be wary while the false positive comments abound in description.

Ultimately

The particularity of SharkBot is that it attacks your bank account with great ingenuity. It is already quite autonomous and its operation is automated. He leaves looking for banking apps on infected smartphones to connect to them casually. At this time, the application retrieves the payload that will allow it to hack. It is this modus operandi that probably allows it to thwart the virus detection analyzes of the Play Store since at first glance, the app seems healthy.

#cybersecurity #CyberAttack #Finance 📱the Trojan horse #sharkbot invited itself into antiviruses for Android and #Apple to steal your bank details 😨📱🕵️‍♀️👉https://t.co/ntzhiJW8yv

— Christian Mertens 🐩⚡🚮♻️ (@cmemertens) March 8, 2022

Once activated, SharkBot uses automatic transfer systems that allow it to automatically fill in the fields of your bank’s apps. Thereby, money transfers to hackers accounts are possible in no difficulty. Once entered into the system, the malware allows itself to simulate the activation of the keyboard keys. Having several strings to his bow, he also uses the phishing technique by displaying a fake login page as soon as the banking applications are opened. The Trojan also uses a keylogger capable of recording your credentials as you type them. Going even further, he can still intercept text messages sent to you to validate money transfers or payments. Really pro in his evil approach, he can even erase them from your smartphone, so as not to really leave any trace of his crime.

If all this is allowed to SharkBot, it is above all because those who use the infected applications have granted very broad access permissions to the application when installing it. Basically, the malware really has free rein over everything you do with your smartphone and everything on it. It can even send messages for you and disable optimizing your battery usage.

If you were unlucky enough to download Antivirus Super Cleaner, Super Cleaner, Atom Clean-Booster, Alpha Antivirus, or Powerful Cleanerwe invite you to uninstall them without delay and take a look at your bank account.