Showing posts with label virus. Show all posts
Showing posts with label virus. Show all posts

These 42 Phones Are Shipped With Triada Banking Virus

Who would thought that a brand new phone he or she bought came with a virus as it was shipped? This is exactly what is Happening now and some phone manufacturers are to be blamed. There is a new security report from Russia that about 42 smartphones are shipped with a banking Trojan virus called 'Triada'.
Phones shipped with virus
It's a bad news for those who love budget phones, especially from not-so-popular brands, like Leagoo.

According to a Russia-based antivirus vendor—Dr. Web, over 42 Android smartphones have been shipped with a trada Android banking trojan.

HOW IT WORKS
Once present can root devices and make it impossible for you to get rid of it without reinstalling the operating system. As stated in the report, the key feature of Android.Triada.231 is that cybercriminals inject this Trojan into the libandroid_runtime.so system library. The virus is not relatively new in the industry but it's very dangerous as it can still your banking information and other private info you type with your phone.

So, are the manufacturers to blame? According to the reports:

Although the blame should mainly go to the third party software developers who inject malware alongside the applications that come with the phones. In their words:

“This [software development] company provided Leagoo with one of its applications to be included into an image of the mobile operating system, as well as with an instruction to add third-party code into the system libraries before their compilation.”

But the phone manufacturers should also get some blame because it's their responsibility to test their devices before shipping them.

Having said that, here are the 42 smartphones that have been affected so far.

Leagoo M5
Leagoo M5 Plus
Leagoo M5 Edge
Leagoo M8
Leagoo M8 Pro
Leagoo Z5C
Leagoo T1 Plus
Leagoo Z3C
Leagoo Z1C
Leagoo M9
ARK Benefit M8
Zopo Speed 7 Plus
UHANS A101
Doogee X5 Max
Doogee X5 Max Pro
Doogee Shoot 1
Doogee Shoot 2
Tecno W2
Homtom HT16
Umi London
Kiano Elegance 5.1
iLife Fivo Lite
Mito A39
Vertex Impress InTouch 4G
Vertex Impress Genius
Advan S5E NXT
Advan S4Z
Advan i5E
STF AERIAL PLUS
STF JOY PRO
Tesla SP6.2
Cubot Rainbow
EXTREME 7
Haier T51
Cherry Mobile Flare S5
Cherry Mobile Flare J2S
Cherry Mobile Flare P1
NOA H6
Pelitt T1 PLUS
Prestigio Grace M5 LTE
BQ 5510

Personally, I think the surprise inclusion on this list is the Tecno W2. However, LEAGOO products made up a large number of the list.

MUST READ: Tips To Make Your Phone Free From Virus.

Which of these phones are you using? What will you do now? Remember the only option or step needed to get rid of the virus is to install a new software or clean custom rom of the phone in question.

Reason Why Adobe Flash is No Longer Safe For Your PC (Uninstall)

I will advise you to uninstall Adobe Flash on your PC as soon as possible but if you are too in love with it and don't want breakup or heartbreak, pls update it at least. This information is coming to you because there are security threats being discovered by Kaspersky that reveals exploit known as FinSpy or FinFisher targeted at computers with Adobe Flash player.

Apart from the malware threats, do you know that Adobe flash is a memory-and-battery-sucking monster that is riddled with holes and years-old unpatched code which makes it a fertile ground for hackers? Okay now you know.

So Kaspersky Labs has revealed that there has been a recent vulnerability discovered in Adobe’s Flash platform that allows hackers to plant malware. According to Kaspersky, the exploit is known as FinSpy or FinFisher and is actually a commercial product that is sold to countries and law enforcement agencies to conduct surveillance. The attacker, BlackOasis, is using the FinSpy malware through Microsoft Word documents to attack victim machines.

READ: Adobe Flash Malware Threat Reported in 2016

Now the most worrying part is the report claims that it has identified BlackOasis targets in countries like Russia, Iraq, Afghanistan, Nigeria, Libya, Jordan, Tunisia, Saudi Arabia, Iran, the Netherlands, Bahrain, United Kingdom, and Angola. So users in these regions should be extremely careful to avoid stories that touches.

Meanwhile, in their quest to curb this issue, Adobe has released a security update that is expected to fix the problem, but it wouldn't be a bad idea to uninstall Flash given that companies like Mozilla and Google have announced their plans to stop supporting flash in their browser and even Adobe has confirmed that they will be ending support for Flash in 2020.

READ: 10 Hidden Notepad Tricks You May Not Know

So the ball is in your court. Are you updating or uninstalling?

How Red Alert 2.0 Trojan Works: Android Malware That Steals Your Banking Login

The coming of internet and online activities made life more easier but I won't forget to highlight the dangers that could potentially emerge from the use of internet. Recently, we have seen an influx of malicious malware and viruses being released to affect the unsuspecting populace. One of the latest Malware to hit the internet is called "Red Alert 2.0 Trojan"

Red Alert 2.0 Trojan is a new Android malware whose main purpose is to steal your banking and social logins details from your phone. Note that Trojan horse, or Trojan, is any malicious computer programme (in this case a mobile application) that appears harmless but tricks users of its true intent so they download/install and use it. It may provide unauthorised access to your device or steal sensitive information.

HOW RED ALERT 2.0 TROJAN WORKS

The Red Alert 2.0 Trojan is hidden in plain site in apps available on third-party app stores as fake versions of legitimate banking or social networking mobile apps.

For instance, you could run a search for XYZ and find a replica of the app and go on to install. Once you launch the app in your phone, it presents you with similar login details as seen in the official app. Once you proceed to enter your login details, your details will be stolen. They are sent to the hackers over the internet and they now have access to your bank account.

What IS NEW ABOUT RED ALERT 2.0

This trojan has a few new tricks too. It is able to intercept and block incoming verification calls from banks and social networks. It can also intercept verification SMS and harvest info from those text messages for the use of the hackers.

The summary is that once Red Alert is active on your mobile phone, thieves can steal your login details and your money while keeping you unreachable by your bank if they suspect malicious activity going on. Nasty boy. This makes the trojan especially dangerous.

RED ALERT 2.0 TROJAN IS CHEAP!

Another problem that researchers point to is the fact that the trojan is being sold on hacking forums for as low as $500, meaning that it can get in the hands of a lot of bad people easily.

Is Your Smartphone Vulnerable To Red Alert 2.0?
Red Alert 2.0 is said to work on phones running Android version 6.0 (Marshmallow) and earlier.

WHAT CAN YOU DO?
Researchers RedAlert 2.0 targets over 60 Android banking and social apps. However, the number can increase quickly, considering how cheap the trojan is being sold. Here are the things you can do to keep yourself safe:

✔ Upgrade your smartphone to Android 7 Nougat, if there is an update available for it. This automatically takes you outside of the scope of Red Alert 2.0, as researchers say the trojan works only on smartphones running Android version 6.0 (Marshmallow) and earlier.

✔️ Be careful where you install your Android mobile applications from. The official app market is your best bet.

✔️ When you run a search for a banking or social networking app, always take a closer look at the details. Often there are little tell-tale signs that can give you a tip. Where in doubt, do not install.

✔️ When wanting to install banking and social apps, if possible, use a link provided on your bank’s website. via.

OTHER DANGEROUS MALWARE
✔ Hummingbird
✔️ CopyCat
✔️ WanaCry
✔️ LeakerLocker

Be careful and stay safe.

VIRUS ALERT! Beware of ExpensiveWall Malware Now Spreading in Playstore

A new dangerous Malware called ExpensiveWall is currently affecting more than 21.1Million Android devices right now. To make things worst, this malicious malware/virus is also traced in Google Playstore according to reports. So this post is to alert you and other Android users about this Malware so that you can stay protected from being attacked.
Lovely wallpaper Malware
The ExpensiveWall Malware was revealed by researchers at Check Point and it has already affected at least 50 apps on Google Play, which were downloaded between 1 million and 4.2 million times before they were removed.

"Lovely wall paper" is one of the infected apps on Playstore. The ExpensiveWall malware was “packed” inside wallpaper apps, which allowed it to escape Google Play's built-in anti-malware protections.

HOW IT WORKS
The ExpensiveWall malware packed inside an android apps, will ask users for permissions, such as SMS and internet access. If granted, the malware will start sending premium SMS messages and register users for other paid services that don't exist without the user's knowledge.

Though granting apps permissions are normal but absolutely abnormal for a wall paper to be asking users for permission for sms or internet access.

SEE ALSO... Beware of LeakerLocker Virus

HOW TO PROTECT YOUR ANDROID FROM BEING INFECTED

It's always advisable not to install apps from unknown sources and if you want to install from playstore, ensure you install trusted apps that has been available for at least one year with good reviews and high number of downloads. Source 1 2.

Beware of Faketoken Trojan Virus That Mimics Ridesharing Apps

Another Trojan Virus is currently trending and it's called "Faketoken". It has been distributed and affected some Android devices through Ridesharing apps so you should be careful and more proactive when using such apps on your devices.

One thing is certain, Malware creators will continue creating and distributing their dangerous viruses as there is no sign of them stopping. Some of them has made so many dollars through these malicious activities and while you can't stop them completely, you can protect your devices and apply common wisdom while dealing with some sensitive online activities. Having said that, let's see how this Malware works.

HOW FAKETOKEN VIRUS WORKS

Some Ridesharing apps have been discovered to be harboring mobile Trojan horses. These malwares steal bank data by impersonating the interfaces of these ridesharing apps. According to Kaspersky Labs, if your ridesharing app asks you to re-enter your credit card information after you have already input it upon installation, you should proceed with caution. The malware responsible for this is known as the Faketoken Trojan, and apparently it has been around for a while now but more active and taking toll on many phones at the moment.

According to Kaspersky, the latest version of the Faketoken Trojan is called Faketoken.q. The company revealed that the malware infects phones through bulk SMS, where it prompts the user to download images. Once the user downloads the image, the Faketoken Trojan installs all its necessary parts, and begins to monitor everything done on the phone. Now, once the malware detects an app whose interface it can simulate, it overlays the app with its own screen. Then, instead of proceeding as usual, the app prompts you to enter your credit card information.

SEE ALSO... How LeakerLocker Virus Infects Your Phone and How To Stay Safe

Some sensitive apps like mobile banking apps, Android Pay, the Google Play Store, and of course ridesharing apps has been infected already. However, the Virus is more popular in Russia but I am spreading this information globally as it could be unleashed to other parts of the world to cause more havoc.

HOW TO STAY SAFE FROM FAKETOKEN VIRUS

Kaspersky recommends that you go to Android settings and prevent the installation of apps from unknown sources.
✔️ Simply go to Settings
✔️ Tap on Security
✔️ Then uncheck Unknown Sources.

On a more serious note, you need to be aware of the permissions an app requests before installation, even if you download the app from a presumably safe source, like Google Play Store. Also, it would be prudent to install an antivirus app on your phone.

Personally, I usually read app permission and requests to know what the app can do on my phone before installing it. Some apps that requires the permission to access my sms, call log, override other apps, galleries and some other sensitive information are carefully examined before i decide to install. I urge you to also apply that principle and you should at least minimize the chances of being attacked by this dangerous and malicious malware in circulation.