GhostBat Android Malware Targets 60 Banking and Payment Apps in India
Summary
Zimperium says an updated GhostBat Android malware variant targets 60 banking and payment apps in India, using fraudulent government-service messages and malicious downloads to steal PINs, intercept SMS, and collect sensitive data.
Key points
- GhostBat targets 60 banking and payment applications in India.
- It is distributed through fraudulent government-service messages and malicious app downloads.
- The malware abuses Android Accessibility Services to steal payment PINs, intercept SMS messages, and collect sensitive data.
- A transparent overlay captures PIN entries while victims use legitimate banking apps.
- Encrypted loaders and remotely configurable settings complicate detection.
Article Details
- Event Type
- Investigation into an updated Android banking malware variant
- Impact
- GhostBat targets 60 banking and payment applications in India. The malware can capture payment PINs through transparent overlays, intercept SMS messages, and collect sensitive data, putting financial transactions at risk.