Watch Out! Android Malware TotalingMod Deletes Mobile Data After Stealing Your Money

The latest Android malware called badmintonMod has raised great concerns among mobile phone users (photo: x @ThehackersNews)

JAKARTA - The latest Android malware called Total Mod has raised great concerns among smartphone users. This malware, which disguises itself as security software, spreads through text messages and is designed to access and steal user financial data. After successfully stealing funds from the victim, badmintonMod didn't stop there; this malware also deleted the victim's cellphone data as the last step to destroy the evidence.

BeautifulMod is a long-distance access (RAT) trojan that was first detected in May by researchers from Cleafy. The app disguises itself as a security tool, using the AVG antiviral icon to scam users. Once installed, the malware asks for access to the Android Accessibility Service, which it uses to remotely control the device.

After gaining access, badmintonMod focused on login data theft and confirmation code to make money transfers from victims' accounts. Malware appears to be targeting users in Europe, with support for English, Romanian, and Italian. There are indications that the developer may be from Romania.

Even worse, after successfully stealing money, badminton Mod deleted the victim's cell phone data. Although this malware has a built-in order to delete data, it only applies to external storage. It is estimated that malware controllers manually carry out data deletion orders to destroy the traces of their activity.

Google has responded to this report by stating that Android users are protected from a version of malware known through Google Play Protect, which is defaultly active on Android devices with Google Play Services. However, as badminton continues to grow and find ways to avoid detection, it is important for users to only download apps from official sources and avoid software from suspicious text messages.

It's important to always keep personal data secure by downloading apps only from trusted sources and not installing software from suspicious messages.