Free Newsletter
Register for our Free Newsletters
Newsletter
Zones
Access Control
LeftNav
Alarms
LeftNav
Biometrics
LeftNav
Detection
LeftNav
Deutsche Zone (German Zone)
LeftNav
Education, Training and Professional Services
LeftNav
Government Programmes
LeftNav
Guarding, Equipment and Enforcement
LeftNav
Industrial Computing Security
LeftNav
IT Security
LeftNav
Physical Security
LeftNav
Surveillance
LeftNav
View All
Other Carouselweb publications
Carousel Web
Defense File
New Materials
Pro Health Zone
Pro Manufacturing Zone
Pro Security Zone
Web Lec
 
 
News

Android malware steals information

Kaspersky Lab UK : 21 January, 2016  (Technical Article)
Kaspersky Lab discovers new Android malware that targets smartphone users for financial fraud
Android malware steals information

Kaspersky Lab’s Anti-Malware Research team has identified Asacub – a new malware that targets Android users for financial gain. When discovered, Asacub displayed all the signs of an information stealing malware; however, some versions of the Trojan are targeting users of online banking in Russia, Ukraine and the US.

With millions of people using their smartphones worldwide to pay for goods and services, 2015 saw cybercriminals exploit this by focusing their efforts on developing malicious financial programs for mobile devices. For the first time ever, a mobile banking Trojan entered the Top-10 most prevalent malicious programs that target finances. The Asacub Trojan is yet another example of this worrying trend.

The first version of the Asacub Trojan was discovered in June 2015. This malware was capable of stealing the contact details, browser history and a list of installed apps from an infected device, as well as having the ability to send SMS messages to given numbers blocking the screen of the device – all standard functions for a typical information stealing Trojan.

However, in the autumn of 2015, Kaspersky Lab’s experts discovered several new versions of the Asacub Trojan which confirmed its transformation into a tool for stealing money, with the new version equipped with phishing pages mimicking log-in pages of banking applications. At first it looked like Asacub was targeting only Russian-speaking users, because the modifications contained fake log-in pages of Russian and Ukrainian banks. But after further investigation, Kaspersky Lab’s experts found a modification with fake pages of a large US bank. These new versions also contained a new set of functions including call redirection and sending USSD requests (a special service for interactive non-voice and non-SMS communications between the user and cellular provider), which made Asacub a very powerful tool for financial fraud.

Although Kaspersky Lab has been aware of several different versions of the Trojan for some time, the company’s threat detection systems found almost no sign of active Asacub campaigns until the end of 2015. Within just one week, Kaspersky Lab identified more than 6,500 attempts to infect users with the malware, making it one of the five most popular mobile Trojans of that week, and the most popular Trojan-Banker.  

“When analysing this Trojan, we found that the Asacub malware has connections to criminals with links to a Windows-based spyware called CoreBot. The domain used by Asacub’s Command&Control center is registered to the same person as tens of domains that were used by Corebot. It is therefore highly likely that these two types of malware are being developed or used by the same gang, who see huge value and criminal gain in exploiting mobile banking users. Based on current trends, we can assume that in 2016, the development and prevalence of mobile banking malware will continue to grow and account for an even greater share of malware attacks. Users need to be extra vigilant to ensure they don’t become the next victim”, warns Roman Unuchek Senior Malware Analyst at Kaspersky Lab USA.

To help users keep their finances secure and defend against the latest malware threats, Kaspersky Lab products successfully detect and block the Asacub malware.

Bookmark and Share
 
Home I Editor's Blog I News by Zone I News by Date I News by Category I Special Reports I Directory I Events I Advertise I Submit Your News I About Us I Guides
 
   © 2012 ProSecurityZone.com
Netgains Logo