Warning fraudsters now creating malicious apps

MOBILE users are being urged to “stop before you tap” in a warning about malicious apps that trick people into downloading malware onto their phone, putting their personal and finance information at risk.

- VICKY SHAW Press Association

Anti-fraud, cybersecurity and finance organisations are highlighting a “surge” in Android malware.

They want people to be on the lookout for unexpected updates or “strange” app requests.

Malicious apps may mimic legitimate tools to steal banking details.

The Cyber Defence Alliance (CDA), UK Finance, Cifas, and ThreatFabric have joined forces to highlight the problem.

In some cases, malicious apps may look like file managers, PDF readers, phone cleaners, or even browsers like Google Chrome, the organisations said.

Once installed, they can appear harmless but later activate harmful features through hidden updates.

Criminals may use techniques which overlay fake login screens on top of real banking apps to steal login credentials.

Deceptive “busy” or “waiting” screens may be displayed to mask fraudulent activity. People may also be prevented from exiting the app or restarting their device.

They may find that excessive permissions such as “accessibility” access are requested.