Alert! Criminals are using fake alerts to spread malware on Android phones; understand

Italian cybersecurity company D3Lab discovered a new strategy for disseminating the malware SpyNote on Android Devices, in which a malicious application masquerades as a seismic alert service.

The fraudulent application emulates the interface of IT Alert, a legitimate Department of Protection service Italian civil service used to issue public alerts regarding natural disasters and emergency situations emergency.

How does the criminals' technique work?

Cybercriminals create a fake website that imitates the IT Alert interface and warns visitors about the possibility of an earthquake resulting from a volcanic eruption. They then ask users to install the malicious application.

D3Lab clarifies that when people try to download the app on iOS devices, they are redirected to the alert platform's genuine website.

However, on devices Android, an APK file that carries the malware is downloaded. It is important to note that this procedure takes place outside the Google Play Store, thus avoiding the security measures of the official store.

Upon installation, the fraudulent app requests a series of invasive permissions from users, including access to accessibility features.

(Image: disclosure)

SpyNote is capable of performing various intrusive actions on infected devices, such as capturing images screen, make calls and intercept access credentials to banking and network applications social.

The recommendation for Italians who may have been affected is to uninstall the application, use software antivirus on your devices and purchase new apps only through the official Google store, Google Play Store.

In response to a report from BleepingComputer, a Google spokesperson confirmed that none of the apps on the Play Store contain the SpyNote malware.

The statement highlighted that the check carried out by the company did not identify such a threat in the store and highlighted that the Play Store employs Google Play Protect to block malicious content and alert users about potential scratchs.

At Trezeme Digital, we understand the importance of effective communication. We know that every word matters, which is why we strive to deliver content that is relevant, engaging and personalized to meet your needs.