Kaspersky Elite Researcher Warns of More Mobile Banking Trojan Attacks on Android and iOS Devices

JAKARTA - As the adoption of mobile banking in Asia Pacific (APAC) continues to increase, global cybersecurity company Kaspersky warns of more attacks on Android and iOS devices.

In particular, active monitoring shows the infamous Anubis Trojan now delivers a combination of mobile banking Trojan with ransomware functionality to its target smartphone.

Mobile banking Trojans are the world's most dangerous malware species. These threats usually steal money from victims' bank accounts by posing as official apps to lure people into installing them. Anubis, is the name of a mobile banking Trojan that has targeted Android since 2017.

An elite Kaspersky researcher, Suguru Ishimaru found that in the second quarter of 2022, 10.48% of Kaspersky users globally had encountered the Anubis mobile banking Trojan.

The initial infection was carried out in various ways, ranging from creating applications that looked official and available on Google Play, Smshing (phishing messages via SMS), mobile banking Trojans, and other malware.

After the victim enters the trap, the perpetrator will take complete control of the device, starting from stealing personal information and identity, accessing private messages and login credentials, recording voice, requesting GPS, disabling play protect, locking the device screen, and much more.

"Anubis is known for endangering hundreds of bank customers per campaign, proving that it is one of the most active malware targeting Android users today," said Ishimaru, in a statement received in Jakarta, Thursday, September 1.

Ishimaru continued, his latest findings show that the cybercriminals behind the threat have already started implementing the ransom functionality, which if modified and proves successful, it is possible that other malicious groups will copy the same technique to steal data and take devices hostage.

"As a result, I see more such attacks in Asia Pacific due to the strong financial motivation of cyber criminals," Ishimaru added more clearly.