Android cyber threats use fake update alerts

Security firm Trusteer says a variation of the SpyEye Trojan is the newest threat to devices running Google\'s Android operating system.

A new threat to your agency’s Android devices looks a lot like an old threat, SC Magazine reports.

Security firm Trusteer says a variation of the SpyEye Trojan is the newest threat to devices running Google’s Android operating system.

The new version is called SpitMo. The security firm F-Secure discovered it, in April.

SpitMo tells the user to download an security update app that turns out to be fake. That app tells the user to call a number to get an activation code. That call is re-routed, though, and the caller gets a fake activation code that allows hackers to intercept text messages.

The Trojan imposes templated fields on targeted banks’ web pages requesting that customers fill in a cellphone number and the international mobile equipment identity (IMEI) number of the device, a unique signature for that specific phone.

This story is part of Federal News Radio’s daily Cybersecurity Update. For more cybersecurity news, click here.

Copyright © 2024 Federal News Network. All rights reserved. This website is not intended for users located within the European Economic Area.