New Android Malware 'HighJack Rat' attacks mobile banking users

[jonsie]

Yet another one to watch out for!

I'm not sure just how serious this is but just a headsup for everyone.

It's important that you check app permissions when downloading them from any source but preferably only download from Google Playstore. Even then, double check.

Source : http://thehackernews.com/2014/07/new-android-malware-hijackrat-attacks.html

"Cybercriminals have rolled out a new malicious Android application that wraps different varieties of banking fraud trick into a single piece of advanced mobile malware.

GOOGLE SERVICE FRAMEWORK - APPLICATION OR MALWARE?

Security researchers at the security firm FireEye have came across a malicious Android application that binds together the latest and older hijacking techniques. The malicious Android app combines private data theft, banking credential theft and spoofing, and remote access into a single unit, where traditional malware has had only one such capability included in it.

Researchers dubbed the malware as HijackRAT, a banking trojan that comes loaded with a malicious Android application which disguises itself as “Google Service Framework,” first and the most advanced Android malware sample of its kind ever discovered, combining all the three malicious activities together."

[perksie]

Thanks for the tip off jonsie, one to be aware of!

[Anonymous]

Cheers for the heads up @jonsie

Much appreciated.

[aldaweb]

Thanks for alerting us jonsie

[jonsie]

Completely off topic but it's fantastic to see @perksie on here again. Welcome my friend

[Toby]

Thank you for raising this jonsie!

Lovely to see you back perksie

[Cleoriff]

Thanks for the heads up @jonsie ...and yes yes yes...lovely to see @perksie back on

[Anonymous]

Thanks indeed @jonsie I would rarely come across reports like that without a nudge from people like your good self.  But it worries the life out of me - even though my use of mobile phone apps is quite restricted (I don't do social media type apps, or stream music/games etc) but I know that does not guarantee me safety online.   It is worrying too to read that having Anti-virus software running is unlikely to catch any viruses.  And the last thing I would mention is that I notice now when I want to download an update to an app from the Google Play Store (I never use any other source) it merely tells me that no further permissions are needed so I have to backtrack to have a look at what permissions already exist before deciding whther to update or uninstall.

Gerry

[Anonymous]

hi guys

I have subscribed to this thread, for knowledge, thank you all 

completely off-subjet

I'm pleased to see you too perksie 

you don't know me 

but I believe we have had an interest in common ie ballroom dancing .....

if I remember rightly when browsing the 'Spotlight' feature a bit of time ago ..... = ..... my short-term memory is getting impaired as I get older

if I have done this post inappropriately then I extend my apologies

WispaRed7 

[Anonymous]

---

@Anonymous wrote:

  It is worrying too to read that having Anti-virus software running is unlikely to catch any viruses.  

---

Having Anti-Virus running is always a precaution and no AV software or app should ever claim to be 100% effective against all viruses. There will always be viruses out there that your AV software of choice probably won't detect, all you can do is opt for the best option which provides you with the best protection in your opinion (be that a free or paid solution).

Similarly, Antivirus software will not necessarily protect you from all Malware, which is what this "HighJackRat" appears to be. Malware is completely different to viruses and although most AV software will detect malwars and potentially unwanted applications (PUA), they will not detect or remove as well as dedicated anti-malware software will.