May 9, 2023
1 min read

New Android malware discovered that steals passwords

On Google Play, both legitimate versions of these apps have over a million downloads…reports Asian Lite News

A new Android malware known as ‘FluHorse’ has been discovered, which targets users in Eastern Asia with malicious apps that look like legitimate versions with over 1,00,000 installs.

According to Check Point Research, these malicious apps are designed to extract sensitive information, including user credentials and Two-Factor Authentication (2FA) codes.

FluHorse malware targets multiple sectors in Eastern Asia and is typically distributed via email.

In some cases, high-profile entities such as government officials were targeted at the initial stages of the phishing email attack.

One of the most concerning aspects of FluHorse is its ability to go undetected for long periods of time, making it a persistent and dangerous threat that is difficult to detect.

According to the report, FluHorse attacks start with targeted and malicious emails sent to high-profile individuals, urging them to take immediate action to resolve an alleged payment issue.

Usually, the target is directed to a phishing website through a hyperlink included in the email. Once there, they are prompted to download the phoney APK (Android package file) of the fake application.

The FluHorse carrier apps mimic ‘ETC,’ a Taiwanese toll collection app, and ‘VPBank Neo,’ a Vietnamese banking app.

On Google Play, both legitimate versions of these apps have over a million downloads.

Moreover, the report said that upon installation, all three fake apps request SMS access in order to intercept incoming 2FA codes in case they are required to hijack the accounts.

The fake apps mimic the original user interfaces but lack functionality beyond two to three windows that load forms that capture the victim’s information.

Following the capture of the victims’ account credentials and credit card information, the apps display a “system is busy” message for 10 minutes to make the process appear realistic while the operators act in the background to intercept 2FA codes and leverage the stolen data.

ALSO READ-WhatsApp rolling out ‘side-by-side’ feature on Android tablets

Previous Story

India-UAE bilateral trade grew 20% in 2022-23

Next Story

Global tech services sector hits $57 bn in deal activity

Latest from Tech Lite

India to host AI impact summit 2026

India to host 2026 AI Summit, boosting global dialogue on safe, inclusive tech, while Gujarat launches state-wide AI plan for governance, growth, and public welfare. India is set to host the AI

Apple Appoints Sabih Khan as New COO

Khan will take over from Jeff Williams, who is stepping down from the role this month and will retire later this year…reports Asian Lite News Apple has announced that Sabih Khan, an

EVs Drive Cleaner Cities

Each EV is equipped with GPS tracking for real-time monitoring and efficiently serves the city’s 159.46 square kilometre area The use of electric vehicles (EVs) in household waste collection is ushering in

India’s Digital Decade Rise

Arundhati Bhattacharya, President and CEO at Salesforce-South Asia and recipient of the Padma Shri, sat down with IANS at an event in the capital to reflect on India’s transformation into a digital
Go toTop

Don't Miss

CERT-In finds multiple vulnerabilities in Android

The affected software includes Android versions 12, 12L, 13, and

Android powers 3B devices globally

Sameer Samat, VP of product management at Android and Google