8 May 2024

Finland warns of Android malware targeting bank users


Finland warns of Android malware targeting bank users

Finland's Transport and Communications Agency, Traficom, has issued a warning about an Android malware campaign that specifically targets bank account holders. The warning comes as clients of various banks across the country reported receiving text messages in Finnish, prompting them to call a specified service number purportedly for addressing debt collection or unusual account activity.

Upon calling the provided number, recipients are coerced into downloading what appears to be antivirus software to secure their devices. However, this software is, in fact, malware disguised as McAfee antivirus. Once installed, the malware grants cybercriminals unauthorized access to the victim's apps and messages, including sensitive online banking information. This access enables the perpetrators to carry out fraudulent transactions and steal funds from the victim's online bank accounts.

Traficom's alert emphasizes that neither banks nor authorities initiate contact with customers via phone to request online service credentials, solicit payments, or instruct the installation of applications from sources outside the official app store. The agency urges individuals to remain vigilant and exercise caution when responding to unsolicited messages or calls, particularly those related to financial matters.

The ongoing campaign exclusively targets Android users, with no reported incidents affecting iPhone users at this time, according to Traficom. The agency advises Android device owners to refrain from downloading applications from sources other than the official app store and to regularly update their devices with the latest security patches to mitigate the risk of falling victim to such malicious activities.


Back to the list

Latest Posts

New North Korean APT focused on espionage and revenue generation, linked to FakePenny ransomware

New North Korean APT focused on espionage and revenue generation, linked to FakePenny ransomware

The group employs traditional and novel attack methods in their operations.
29 May 2024
US sanctions Chinese nationals for running 911 S5 proxy botnet linked to cybercrime and bomb threats

US sanctions Chinese nationals for running 911 S5 proxy botnet linked to cybercrime and bomb threats

911 S5infected user devices with proxy malware, allowing cybercriminals to route their malicious traffic through compromised devices.
29 May 2024
Spyware found on US hotel check-in computers, leaking guest information

Spyware found on US hotel check-in computers, leaking guest information

A security flaw in the app has made the sensitive info accessible to anyone on the internet.
28 May 2024