Android Malware Used To Rob Russian Bank Customers

Hackers have used malware planted on Android smartphones to steal 50 million roubles (around £677,000) from domestic bank customers.

Reuters reported that the hackers have been caught and arrested before they could target European financial organisations with more advance malware they had purchased with their ill gotten gains.

The ‘Cron’ gang, comprising 16 cyber criminals, carried out the theft by tricking customers of Russian banks into downloading malware-loaded fake banking applications along with ponography and e-commerce software with malicious code lucking in it, which enabled them to gain control of the infected smartphones.

From there the hackers were able to send SMS messages to the mobile users’ banks instructing the transfer of money.

Bank breaching

Cyber security firm Group-IB investigated the cyber attack alongside the Russian Interior Ministry where it was discovered that a million smartphones in Russia had been infected with the malware before the 16 hacker suspects were arrested last November.

“Group-IB first learnt about Cron in March 2015: Group-IB’s Intelligence system tracked the activity of a new criminal group that was distributing malicious programs named ‘viber.apk’, ‘Google-Play.apk’, ‘Google_Play.apk’ for Android OS on underground forums,” explained the  cyber security company.

“The hackers called this malware “Cron”, hence the logic for our naming convention of the group. Cron targeted users of large Russian banks in the Top 50 standing – all of their SMS banking services were under siege during Cron’s operations.”

The situation came to light when sources close to the investigation tipped off Reuters.

Luckily for the people with infects smartphones and unfortunately for the hackers, only small sums can be transferred via SMS instructions, so despite the volume of devices affected, the amount of money the hackers stole was not astronomical.

However, the hack attack highlights the weaknesses of SM S when it comes to handling banking. SMS banking services are used in Russia to help people living in isolated areas, where access to banks is not easy.

The hack attacks also indicate that Google still has work to do in protecting its Android platform from becoming the propagator of malicious mobile apps and malware, something it appears to be focusing more on with Android O.

Quiz: What do you know about Android?

Roland Moore-Colyer

As News Editor of Silicon UK, Roland keeps a keen eye on the daily tech news coverage for the site, while also focusing on stories around cyber security, public sector IT, innovation, AI, and gadgets.

Recent Posts

Mozilla Foundation Confirms Layoffs, Eliminates Advocacy Division

Mozilla Foundation axes 30 percent of its staff, and is eliminating its Advocacy Division that…

1 hour ago

Google To Make MFA Mandatory Next Year

Improving security. Mandatory multi-factor authentication (MFA) is coming to the Google Cloud by the end…

2 hours ago

UK Government Launch AI Safety Platform For Businesses

New AI assurance platform from UK government will help businesses ensure they can safely develop…

3 hours ago

Australia Plans Social Media Ban For Children Under 16

Protecting kids? Australian government confirms plan to implement restriction on social media for children under…

5 hours ago

Canada Orders Shutdown Of TikTok’s Canadian Business

Canada ordered China's TikTok business in the country to be dissolved over national security risks,…

7 hours ago

Amazon Boss Denies Return To Office Mandate Is ‘Backdoor Layoff’

CEO Andy Jassy tells Amazon staff that the recent 5-day in-office mandate is not meant…

1 day ago