Vulture is circling Android. Clever dangerous malware

The Vultures were not translated Sup. Such a name was given by analysts from Threat Fabric to a new species malwarewhich threatens users of the Android operating system. Especially those who actively use mobile banking or trade in cryptocurrencies. Experts called it a very clever and insidious tool very aptly. After deploying a long-term recording of what is happening on the screen waiting for the right momentwhen he attacks his victim.

At Threat Fabric, they came across Vultur malware in March this year and soon found out how clever it was. Like other similar hacker tools, it hides its icon after installation and works in the background. Although more in the foreground, as it records the interactions taking place on the display. It focuses on control of transactional applicationswhere it can logically do the most damage.

The most affected were bank applications in Italy, Australia and Spain, however, it is not entirely out of the question that some Czechs with accounts in domestic institutions may also have been affected. In addition, it largely contributes to the total number of detected cases international cryptocurrencies Crypto.com or Trust. Unfortunately, the Malware Vultur alias Sup got into the victims’ phones directly from the Play Store, paradoxically as a Protection Guard application. It has collected over 5,000 downloads.

At the moment, after Google’s intervention, the application is no longer in the official database, but it can theoretically reappear in another form. The insidiousness of this tool is worked to the limit of perfection also by the fact that after detection it is practically impossible for the user to uninstall. When calling up this menu, the software robot always automatically clicks the Back button. Definitely be wary of similarly promising-looking applications that offer different types of protection.

How many banking or crypto tools do you have in your mobile phone?

Source: ThreatFabric