Android users have been placed on red alert after the discovery of a new threat that targets Chrome and attacks bank accounts. Don’t get caught out.
There’s a worrying new warning for Android users and it’s definitely not something to ignore if you have the popular Chrome web browser installed on your smartphone. It seems cyber crooks are trying to hijack devices with a vicious new bug called Brokewell. Once installed, this money-stealing banking malware is then able to access personal data and even perform a full device takeover – this could lead to bank accounts being drained of cash.
The team at ThreatFabric, who discovered the bug, say Brokewell “poses a significant threat to the banking industry.” This is due to it being equipped with both data-stealing and remote-control capabilities built into the malware.
“Brokewell uses overlay attacks, a common technique for Android banking malware, where it overlays a bogus screen on a targeted application to capture user credentials. Additionally, Brokewell can steal cookies, another feature common in modern mobile banking malware,” ThreatFabric confirmed.
Unlike a lot of Android malware, this latest bug isn’t delivered to devices via dodgy apps. Instead, hackers are using fake Chrome browser downloads to trick users into installing it onto their devices.
Images released by ThreatFabric show the official-looking upgrade which appears just like those pushed out by Google. This makes it really tough to spot as, to the untrained eye, it all seems like an innocent piece of software.
It’s now vital Android users stay aware and only download browser updates from official sources, such as Google.
If you suddenly get a pop-up window asking you to update your Chrome browser, think twice before you tap the install button. If you think you may have already installed an upgrade via the web then it’s a good idea to keep an eye on your accounts for suspicious activity.
“Malware families like Brokewell pose a significant risk for customers of financial institutions, leading to successful fraud cases that are hard to detect without proper fraud detection measures,” ThreatFabric added.
Stay alert and keep your smartphone up to date with all the latest software updates. That should help to keep you safe.
