While not new or innovative it is a clever bit of code relying on elements native to the device under attack to help the malware accomplish its mission. "By utilizing the Application Accessibility toolkit installed on Android by default, the attacker is able to use the application to implement the Overlay attack to trick the user into entering credit card information for fake account breaches on both Netflix and Twitter." ![]() Independent analyst Alberto Segura shared a second sample online a week ago with the note that the malware he sampled was used against Android users in Turkey and Poland.Īvast Threat Labs got their hands on the sample and discovered APIs provided by the built-in Android Accessibility Service were utilized to display the malicious overlays.Īvast Threat Lab had this to say about their research: ![]() Called MasterFred this new malware utilizes well-constructed fake login overlays in order to steal the login and credit card information for Twitter Instagram and Netflix users.Ī sample of the code was submitted to VirusTotal in June of 2021 when the malware was first spotted in the wild. ![]() If you have an Android device be aware that there's a new strain of malware out there.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |