Android Users Warned of New Threat from Anatsa Banking Trojan
Android users across Europe, including the UK, Germany, Spain, Slovakia, Slovenia, and the Czech Republic, are being targeted by Anatsa, a banking Trojan. This malware has infected between 150,000 to 200,000 devices, posing a serious threat to their financial security.
Researchers from ThreatFabric first identified Anatsa in November. The Trojan has since cleverly attached itself to popular apps, positioning itself in the top spots of the “Top New Free” categories on the Play Store. By doing so, it entices more downloads, thereby infecting more devices.
Anatsa takes advantage of the Android Accessibility Service, a feature intended to make devices more user-friendly. It disguises itself as apps that promise to “hibernate battery-draining apps”, tricking users into granting it permission to use this service. Once this permission is granted, the apps download parts of malicious code in increments to avoid detection. This code ultimately installs the Trojan, stealing sensitive banking information like login details.
To combat this threat, Google has removed the following apps from the Play Store:
- Phone Cleaner
- File Explorer PDF Viewer
- File Explorer PDF Reader
- Viewer & Editor Phone Cleaner
- File Explorer PDF Reader
- File Manager
It’s important to note that these apps may still be present on devices, so users are advised to delete them immediately if found.
To protect against future malware risks, users should exercise caution when downloading apps that claim to enhance phone performance. It is advisable to only trust apps from well-known and reputable developers. Scrutinizing an app’s Play Store page for language professionalism and high-quality imagery that accurately represents the app’s functionalities is essential. Additionally, reading through reviews, particularly the most critical ones, can offer insights into whether the app is legitimate or possibly malicious.
Stay vigilant and prioritize your financial security when downloading apps to your Android device.
Analyst comment
Negative news: Android users warned of new threat from Anatsa Banking Trojan.
As an analyst, I predict that the market for Android security apps will see an increase as users become more proactive in protecting their devices. Reputable developers may benefit as users prioritize trusted sources for app downloads. This may also lead to increased caution and scrutiny from users when downloading apps, potentially impacting the popularity of lesser-known developers.
