{"id":6181,"date":"2017-07-24T15:53:04","date_gmt":"2017-07-24T15:53:04","guid":{"rendered":"https:\/\/igotoffer.com\/blog\/?p=6181"},"modified":"2018-02-18T14:44:17","modified_gmt":"2018-02-18T14:44:17","slug":"bankbot-malware-hit-google-store","status":"publish","type":"post","link":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store","title":{"rendered":"BankBot Malware Hits Google Store Once More"},"content":{"rendered":"<h2>BankBot Malware Hits Google Store Once More<\/h2>\n<p>In our past articles on online security, we\u2019ve warned you against downloading software from unauthorized sources. But, it turns out that even the app stores cannot be 100% safe nowadays. The Bankbot malware hit the Google Play Store once again.<\/p>\n<p>It started spreading from Turkey at the beginning of this year, but now the USA and UK are also under attack.<\/p>\n<p>The malicious Trojan, the Android.BankBot.149.origin, belongs to the family of viruses which copy the authentic bank payment screen (hence, it\u2019s nickname). Since its first appearance in 2008, expert had declared it dead; however, they were mistaken. The BankBot has made a comeback.<\/p>\n<p>Unfortunately, malware that steals bank account details will always be around. And obviously, the apps stores and online services will probably always be their hunting grounds.<\/p>\n<p>The Android.BankBot.149.origin is extremely malicious. It stays on your Android device even if you\u2019ve deleted the infected app (and if you have antivirus installed, you\u2019ll be informed about the infected file immediately). On installation of the infected application, the trojan asks for administrator privileges. Once those are granted, it deletes the icon and starts monitoring any keyboard activity as well as the text windows content: SMS, chats, whatever. Then the bot imitates the payment screen when you buy something from the game or shop on-line. The same goes for internet banking login screens, PayPal, and others. Unfortunately, there\u2019s no way to check to see if the screen is genuine on your end. And by thinking that your data\u2019s safe, you actually end up hand delivering your credit card number, CVC and password to the culprits.<\/p>\n<p style=\"text-align: center\"><img loading=\"lazy\" class=\"aligncenter size-full wp-image-6182\" src=\"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america.jpg\" alt=\"bank of america fake screen\" width=\"367\" height=\"448\" srcset=\"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america.jpg 367w, https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america-246x300.jpg 246w, https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america-123x150.jpg 123w\" sizes=\"(max-width: 367px) 100vw, 367px\" \/><\/p>\n<h3 style=\"text-align: center\">List of the Apps Monitored<\/h3>\n<p style=\"text-align: justify\">The malware doesn\u2019t slow the device down. It almost always sleeps, only springing up to life when a payable application is brought up. The list of the applications monitored includes:<\/p>\n<ul>\n<li style=\"text-align: justify\">WhatsApp<\/li>\n<li style=\"text-align: justify\">Play Store<\/li>\n<li style=\"text-align: justify\">Messenger<\/li>\n<li style=\"text-align: justify\">Facebook<\/li>\n<li style=\"text-align: justify\">WeChat<\/li>\n<li style=\"text-align: justify\">Youtube<\/li>\n<li style=\"text-align: justify\">Uber<\/li>\n<li style=\"text-align: justify\">Viber<\/li>\n<li style=\"text-align: justify\">Snapchat<\/li>\n<li style=\"text-align: justify\">Instagram<\/li>\n<li style=\"text-align: justify\">Imo<\/li>\n<li style=\"text-align: justify\">Twitter<\/li>\n<\/ul>\n<h3 style=\"text-align: center\">Malware Scanning the System<\/h3>\n<p>Bankbot has the ability to turn off vibration and sound for you to remain ignorant about the incoming SMS, and can delete the text to replace it with the bogus one. Moreover, the malware is very cautious and scans the system for the antivirus software from the list below.<\/p>\n<ul>\n<li>Anti-virus Dr.Web Light<\/li>\n<li>CM Security AppLock AntiVirus<\/li>\n<li>Kaspersky Antivirus &amp; Security<\/li>\n<li>ESET Mobile Security &amp; Antivirus<\/li>\n<li>Avast Mobile Security &amp; Antivirus<\/li>\n<li>Clean Master (Boost&amp;Antivirus)<\/li>\n<li>360 Security &#8211; Antivirus<\/li>\n<li>AVG AntiVirus FREE for Android<\/li>\n<li>Antivirus Free &#8211; Virus Cleaner<\/li>\n<li>Super Cleaner &#8211; Antivirus<\/li>\n<li>AndroHelm AntiVirus Android 2017<\/li>\n<li>TrustGo Antivirus &amp; Mobile Security<\/li>\n<li>Sophos Free Antivirus and Security<\/li>\n<\/ul>\n<p>Then, it tries to fake the info the security software sends to its server. Still, the experts of the leading antivirus companies have spotted the malware behavior and have come up with a solution.<\/p>\n<h3 style=\"text-align: center\">How to get rid of Android.BankBot.149.origin<\/h3>\n<ol>\n<li>Check if you have an antivirus aboard.<\/li>\n<li>Go to the antivirus official site and check if there are any updates concerning the malware in question. If you haven\u2019t got any antivirus at all \u2013 install it! (It\u2019s a good time to start using protection anyway).<\/li>\n<li>Run the full scan of your system and follow the recommendations.<\/li>\n<li>Repeat every two or three days.<\/li>\n<li>Or, turn the pro-active protection on; if your antivirus features it.<\/li>\n<\/ol>\n<p>And again, Google leaves us wondering what the heck is going on with their own security.<\/p>\n<p>Perhaps, they should tweak their entry regulations or something, since allowing this to be downloaded is unacceptable. Look at the Apple Store! Cracking down on the smallest break of the rules can actually pay off!<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>BankBot Malware Hits Google Store Once More In our past articles on online security, we\u2019ve warned you against downloading software from unauthorized sources. But, it turns out that even the app stores cannot be 100% safe nowadays. The Bankbot malware hit the Google Play Store once again. It started spreading from Turkey at the beginning [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6182,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[427,475],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>BankBot Malware Hits Google Store Once More | iGotOffer<\/title>\n<meta name=\"description\" content=\"BankBot Malware Hits Google Store Once More. In our articles on online security we\u2019ve warned you against downloading software from unauthorized sources.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"BankBot Malware Hits Google Store Once More | iGotOffer\" \/>\n<meta property=\"og:description\" content=\"BankBot Malware Hits Google Store Once More. In our articles on online security we\u2019ve warned you against downloading software from unauthorized sources.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store\" \/>\n<meta property=\"og:site_name\" content=\"iGotOffer Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/iGotOffer\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/svetlana.ustinova2\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-24T15:53:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-02-18T14:44:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"367\" \/>\n\t<meta property=\"og:image:height\" content=\"448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@iGotOffer\" \/>\n<meta name=\"twitter:site\" content=\"@iGotOffer\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Steve\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/igotoffer.com\/blog\/#website\",\"url\":\"https:\/\/igotoffer.com\/blog\/\",\"name\":\"iGotOffer Blog\",\"description\":\"News and reviews about electronics &amp; apps\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/igotoffer.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#primaryimage\",\"url\":\"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america.jpg\",\"contentUrl\":\"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america.jpg\",\"width\":367,\"height\":448,\"caption\":\"bank of america fake screen\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#webpage\",\"url\":\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store\",\"name\":\"BankBot Malware Hits Google Store Once More | iGotOffer\",\"isPartOf\":{\"@id\":\"https:\/\/igotoffer.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#primaryimage\"},\"datePublished\":\"2017-07-24T15:53:04+00:00\",\"dateModified\":\"2018-02-18T14:44:17+00:00\",\"author\":{\"@id\":\"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/2e5559af8f4c85b3c121b665ccef1e16\"},\"description\":\"BankBot Malware Hits Google Store Once More. In our articles on online security we\u2019ve warned you against downloading software from unauthorized sources.\",\"breadcrumb\":{\"@id\":\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/igotoffer.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"BankBot Malware Hits Google Store Once More\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/2e5559af8f4c85b3c121b665ccef1e16\",\"name\":\"Steve\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ef902dfdf5f1c30f261fa557b8d6d80a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ef902dfdf5f1c30f261fa557b8d6d80a?s=96&d=mm&r=g\",\"caption\":\"Steve\"},\"sameAs\":[\"https:\/\/igotoffer.com\/\",\"https:\/\/www.facebook.com\/svetlana.ustinova2\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"BankBot Malware Hits Google Store Once More | iGotOffer","description":"BankBot Malware Hits Google Store Once More. In our articles on online security we\u2019ve warned you against downloading software from unauthorized sources.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store","og_locale":"en_US","og_type":"article","og_title":"BankBot Malware Hits Google Store Once More | iGotOffer","og_description":"BankBot Malware Hits Google Store Once More. In our articles on online security we\u2019ve warned you against downloading software from unauthorized sources.","og_url":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store","og_site_name":"iGotOffer Blog","article_publisher":"https:\/\/www.facebook.com\/iGotOffer","article_author":"https:\/\/www.facebook.com\/svetlana.ustinova2","article_published_time":"2017-07-24T15:53:04+00:00","article_modified_time":"2018-02-18T14:44:17+00:00","og_image":[{"width":367,"height":448,"url":"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_creator":"@iGotOffer","twitter_site":"@iGotOffer","twitter_misc":{"Written by":"Steve","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/igotoffer.com\/blog\/#website","url":"https:\/\/igotoffer.com\/blog\/","name":"iGotOffer Blog","description":"News and reviews about electronics &amp; apps","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/igotoffer.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#primaryimage","url":"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america.jpg","contentUrl":"https:\/\/igotoffer.com\/blog\/wp-content\/uploads\/2017\/07\/bank_america.jpg","width":367,"height":448,"caption":"bank of america fake screen"},{"@type":"WebPage","@id":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#webpage","url":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store","name":"BankBot Malware Hits Google Store Once More | iGotOffer","isPartOf":{"@id":"https:\/\/igotoffer.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#primaryimage"},"datePublished":"2017-07-24T15:53:04+00:00","dateModified":"2018-02-18T14:44:17+00:00","author":{"@id":"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/2e5559af8f4c85b3c121b665ccef1e16"},"description":"BankBot Malware Hits Google Store Once More. In our articles on online security we\u2019ve warned you against downloading software from unauthorized sources.","breadcrumb":{"@id":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/igotoffer.com\/blog\/bankbot-malware-hit-google-store#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/igotoffer.com\/blog\/"},{"@type":"ListItem","position":2,"name":"BankBot Malware Hits Google Store Once More"}]},{"@type":"Person","@id":"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/2e5559af8f4c85b3c121b665ccef1e16","name":"Steve","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/igotoffer.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ef902dfdf5f1c30f261fa557b8d6d80a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ef902dfdf5f1c30f261fa557b8d6d80a?s=96&d=mm&r=g","caption":"Steve"},"sameAs":["https:\/\/igotoffer.com\/","https:\/\/www.facebook.com\/svetlana.ustinova2"]}]}},"_links":{"self":[{"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/posts\/6181"}],"collection":[{"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/comments?post=6181"}],"version-history":[{"count":0,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/posts\/6181\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/media\/6182"}],"wp:attachment":[{"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/media?parent=6181"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/categories?post=6181"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/igotoffer.com\/blog\/wp-json\/wp\/v2\/tags?post=6181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}