Android Malware Used To Rob Russian Bank Customers

Hackers have used malware planted on Android smartphones to steal 50 million roubles (around £677,000) from domestic bank customers.

Reuters reported that the hackers have been caught and arrested before they could target European financial organisations with more advance malware they had purchased with their ill gotten gains.

The ‘Cron’ gang, comprising 16 cyber criminals, carried out the theft by tricking customers of Russian banks into downloading malware-loaded fake banking applications along with ponography and e-commerce software with malicious code lucking in it, which enabled them to gain control of the infected smartphones.

From there the hackers were able to send SMS messages to the mobile users’ banks instructing the transfer of money.

Bank breaching

Cyber security firm Group-IB investigated the cyber attack alongside the Russian Interior Ministry where it was discovered that a million smartphones in Russia had been infected with the malware before the 16 hacker suspects were arrested last November.

“Group-IB first learnt about Cron in March 2015: Group-IB’s Intelligence system tracked the activity of a new criminal group that was distributing malicious programs named ‘viber.apk’, ‘Google-Play.apk’, ‘Google_Play.apk’ for Android OS on underground forums,” explained the  cyber security company.

“The hackers called this malware “Cron”, hence the logic for our naming convention of the group. Cron targeted users of large Russian banks in the Top 50 standing – all of their SMS banking services were under siege during Cron’s operations.”

The situation came to light when sources close to the investigation tipped off Reuters.

Luckily for the people with infects smartphones and unfortunately for the hackers, only small sums can be transferred via SMS instructions, so despite the volume of devices affected, the amount of money the hackers stole was not astronomical.

However, the hack attack highlights the weaknesses of SM S when it comes to handling banking. SMS banking services are used in Russia to help people living in isolated areas, where access to banks is not easy.

The hack attacks also indicate that Google still has work to do in protecting its Android platform from becoming the propagator of malicious mobile apps and malware, something it appears to be focusing more on with Android O.

Quiz: What do you know about Android?

Roland Moore-Colyer

As News Editor of Silicon UK, Roland keeps a keen eye on the daily tech news coverage for the site, while also focusing on stories around cyber security, public sector IT, innovation, AI, and gadgets.

Recent Posts

Google Warns Of Italian Spyware On Apple, Android Phones

Italian company's hacking tools have been used to spy on Apple, Android smartphones in Italy…

3 days ago

Intel Signals Delay To Ohio Factory Over US Chips Act Dispute

Chip maker warns new factory in Columbus, Ohio could be delayed or scaled back, over…

3 days ago

Silicon UK In Focus Podcast: Sustainable Business

How do sustainable businesses use technology to innovate? And as businesses want to connect sustainability…

3 days ago

Australia Fines Samsung Over Water-Resistance Claims

Samsung rapped over the knuckles by Australian regulator because of 'misleading' Galaxy smartphone water-resistance claims…

3 days ago

Amazon Reveals Alexa Option To Mimic Any Person’s Voice

Bereavement aid for those in mourning? Amazon's Alexa voice assistant could be programmed to sound…

3 days ago