topic Re: New Android Malware 'HighJack Rat' attacks mobile banking users in Off-Topic

New Android Malware 'HighJack Rat' attacks mobile banking users

jonsie — Thu, 03 Jul 2014 12:04:30 GMT

Yet another one to watch out for!

I'm not sure just how serious this is but just a headsup for everyone.

It's important that you check app permissions when downloading them from any source but preferably only download from Google Playstore. Even then, double check.

Source : http://thehackernews.com/2014/07/new-android-malware-hijackrat-attacks.html

"Cybercriminals have rolled out a new malicious Android application that wraps different varieties of banking fraud trick into a single piece of advanced mobile malware.

GOOGLE SERVICE FRAMEWORK - APPLICATION OR MALWARE?

Security researchers at the security firm FireEye have came across a malicious Android application that binds together the latest and older hijacking techniques. The malicious Android app combines private data theft, banking credential theft and spoofing, and remote access into a single unit, where traditional malware has had only one such capability included in it.

Researchers dubbed the malware as HijackRAT, a banking trojan that comes loaded with a malicious Android application which disguises itself as “Google Service Framework,” first and the most advanced Android malware sample of its kind ever discovered, combining all the three malicious activities together."

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

perksie — Thu, 03 Jul 2014 12:27:40 GMT

Thanks for the tip off jonsie, one to be aware of!

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Anonymous — Thu, 03 Jul 2014 12:31:36 GMT

Cheers for the heads up @jonsie

Much appreciated.

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

aldaweb — Thu, 03 Jul 2014 12:45:03 GMT

Thanks for alerting us jonsie

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

jonsie — Thu, 03 Jul 2014 12:51:30 GMT

Completely off topic but it's fantastic to see @perksie on here again. Welcome my friend

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Toby — Thu, 03 Jul 2014 12:53:15 GMT

Thank you for raising this jonsie!

Lovely to see you back perksie

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Cleoriff — Thu, 03 Jul 2014 13:57:35 GMT

Thanks for the heads up @jonsie ...and yes yes yes...lovely to see @perksie back on

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Anonymous — Thu, 03 Jul 2014 15:04:01 GMT

Thanks indeed @jonsie I would rarely come across reports like that without a nudge from people like your good self. But it worries the life out of me - even though my use of mobile phone apps is quite restricted (I don't do social media type apps, or stream music/games etc) but I know that does not guarantee me safety online. It is worrying too to read that having Anti-virus software running is unlikely to catch any viruses. And the last thing I would mention is that I notice now when I want to download an update to an app from the Google Play Store (I never use any other source) it merely tells me that no further permissions are needed so I have to backtrack to have a look at what permissions already exist before deciding whther to update or uninstall.

Gerry

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Anonymous — Thu, 03 Jul 2014 15:27:30 GMT

hi guys

I have subscribed to this thread, for knowledge, thank you all

completely off-subjet

I'm pleased to see you too perksie

you don't know me

but I believe we have had an interest in common ie ballroom dancing .....

if I remember rightly when browsing the 'Spotlight' feature a bit of time ago ..... = ..... my short-term memory is getting impaired as I get older

if I have done this post inappropriately then I extend my apologies

WispaRed7

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Anonymous — Thu, 03 Jul 2014 16:04:31 GMT

@Anonymous wrote:
It is worrying too to read that having Anti-virus software running is unlikely to catch any viruses.

Having Anti-Virus running is always a precaution and no AV software or app should ever claim to be 100% effective against all viruses. There will always be viruses out there that your AV software of choice probably won't detect, all you can do is opt for the best option which provides you with the best protection in your opinion (be that a free or paid solution).

Similarly, Antivirus software will not necessarily protect you from all Malware, which is what this "HighJackRat" appears to be. Malware is completely different to viruses and although most AV software will detect malwars and potentially unwanted applications (PUA), they will not detect or remove as well as dedicated anti-malware software will.

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Cleoriff — Thu, 03 Jul 2014 16:22:41 GMT

I have read the article as provided by @jonsie and it is worrying that it states anti-virus software would not be effective. Problem is, it doesn't tell us what would? It says this Highjack Rat attempts to disable all security systems you may have in place?

"IS MOBILE ANTIVIRUS NEEDED? GOOGLE SAYS “NO”

Despite strict warnings from security companies, Google’s head of Android security says the majority of Android device users do not need to install any anti-virus solution and other security applications to protect their devices.

Google’s security researchers say those who used antivirus or security app on their phone would probably never actually receive protection from it, and because every Android app goes through the Google automated system that checked for every issue, and verified those apps that didn’t contain any malware or malicious activities, before they were made available on the app store.

But, the question here is that if every Android app goes through Google Automated System, then why Google Play Store is surrounded by so many malicious apps? "

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Anonymous — Thu, 03 Jul 2014 20:59:10 GMT

@perksie where ya been?

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

perksie — Thu, 17 Jul 2014 18:06:41 GMT

@Anonymous wrote:
@perksie where ya been?

I'm usually around somewhere just not on here too often for various reasons.

Thank you for asking though!

Re: New Android Malware 'HighJack Rat' attacks mobile banking users

Cleoriff — Thu, 17 Jul 2014 18:23:18 GMT

Lovely to see you back @perksie I have missed the banter