Invisible Man Malware Targets Banking Services On Android Devices

Fresh Android malware targeting mobile banking customers has been discovered by cyber security firm Sophos Labs.

The malware dubbed Invisible Man is a keylogger that lurks in the Google Play Store as a bogus update for Adobe’s Flash Player.

Once downloaded, Invisible Man exploits permissions to accessibility settings whereby it then gains control over functions such as creating invisible overlays on banking apps and setting itself up as the default messaging app.

With such access the malware can suck up usernames and passwords by intercepting keystrokes.

Invisible Man also pops up an overlay on the Play Store to trick users into inputting their credit card details, which it then snatches.

Flash threat

One interesting characteristic with Invisible Man is that it will not infect Android devices with Russian language settings, which potentially provides a hit to the origin on the malware, which itself is a variant of the Svpeng malware who’s original creators got caught by Russia’s Ministry of the Interior back in 2015.

Loading ...

Given Invisible Man lurks behind Flash, which has long been a vector for spreading malware and executing cyber attacks, the solution to avoiding such malware problems is to stay away from downloading and installing unknown apps, especially those claiming to deal with the soon to be completely defunct software.

That being said, there has been a surge in banking malware across Europe this year, so simply avoiding Flash might not be keep you completely safe, and being vigilant of spam and phishing attacks will also be needed to defend against such cyber threats.

Quiz: What do you know about cyber security in 2017?

Roland Moore-Colyer

As News Editor of Silicon UK, Roland keeps a keen eye on the daily tech news coverage for the site, while also focusing on stories around cyber security, public sector IT, innovation, AI, and gadgets.

Recent Posts

The State of Quantum Security

No longer a technology on the distant horizon, quantum computing brings with it security challenges…

8 hours ago

US Carmakers Warn Over Upcoming Electric Vehicle Incentives

Climate and tax bill worth $430bn passed by US Congress last week could immediately eliminate…

9 hours ago

Mercedes-Benz And CATL To Build Massive EV Battery Plant In Hungary

Mercedes-Benz and world's biggest EV battery maker CATL to build 7.3bn euro battery plant in…

9 hours ago

ESA In Talks With SpaceX Over Launches To Replace Soyuz

European Space Agency confirms it is in talks with SpaceX over using Falcon 9 as…

10 hours ago

Disney Brings Ads To Streaming Platform As It Surpasses Netflix

Disney to introduce ad-supported version of Disney+ in December along with price hikes, as it…

10 hours ago

Meta Gathers AI Data As Chatbot Calls Zuckerberg ‘Creepy’

Facebook parent Meta gathers data from user interactions with latest chatbot as BlenderBot 3 criticises…

11 hours ago