JAKARTA – Recently, a trojan has been discovered that has the ability to perform automatic transactions or the Automatic Transfer System (ATS). The Trojan is named Sharkbot. He managed to trick the security system on the Google Play Store. Sharkbot pretends to be an antivirus app.
Sharkbot Trojan is not much different from other malware. The difference is that Sharkbot is designed to be able to infiltrate the victim's electronic device and steal money using ATS. The behavior of this trojan is considered quite dangerous.
"The ATS feature allows malware to receive a list of events that will be simulated and they will be simulated to make money transfers," said NCC Group malware researcher Alberto Segura and his colleague Rolf Govers as quoted by The Hacker News.
“Because this feature can be used to simulate touch/clicks and keystrokes, it can be used not only to send money automatically but also to install apps or other malicious components.”
That means ATS can be used to trick targeted bank fraud detection systems. Sharbot simulates the sequence of actions that the user will perform, such as button presses, clicks, and gestures to make unauthorized money transfers.
In addition, Sharkbot also has its own features to deal with enemies. These financial trojans can provide fake overlays on top of official banking apps. It is intended to steal credentials, record keystrokes and gain full remote control of the victim's device.
Sharkbot can do all this provided that the victim grants app accessibility permissions to the device. Prior to this trojan, there was already another financial trojan, namely Flubot, which has the ability to prevent notifications or notifications in the event of a wormable malware attack.
Reporting from PhoneArena, the Sharkbot financial trojan disguised itself as an Antivirus Super Cleaner application. The app can carry a new type of financial trojan called Sharkbot.
The English, Chinese, Japanese, Arabic, and French versions are automatically generated by the AI. So there may still be inaccuracies in translating, please always see Indonesian as our main language. (system supported by DigitalSiber.id)
