New dangerous malware BlackRock targets Android users
Specialists of the ThreatFabric company working in the field of information security reported the discovery of new dangerous malware that threatens hundreds of popular applications for the Android mobile platform. We are talking about BlackRock malware, which can be used to steal credentials and payment information.
BlackRock is reportedly a banking Trojan, but it can be used to steal sensitive data from many popular applications, including PayPal, Gmail, Uber, eBay, Netflix, Amazon, Telegram, WhatsApp, Skype, Twitter, Facebook, Instagram , TikTok, YouTube, Tinder, Pinterest, etc. In total, the malware threatens 337 popular applications for the Android mobile platform.
In the course of the BlackRock research, experts found that it was based on the code of the banking Trojan Xerxes, which is a type of malware LokiBot. The source code of the Xerxes software was made public by its author in the middle of last year, so it is not surprising that someone decided to make a new Trojan based on it.
To distribute BlackRock, cybercriminals disguise it as a legitimate Google Update. After hitting the device, the trojan requests permission to increase the level of rights in the system, upon receipt of which, it can receive remote commands from intruders, working without further interaction with the victim. Although the Trojan is primarily aimed at stealing payment data, it can be used to collect all kinds of confidential information.
You don’t need to uninstall popular apps from your smartphone to protect your data from BlackRock. It is enough to carefully monitor what you download to the device. The malware in question was not seen in the official Play Store, which means it spreads through third-party resources. Thus, downloading content from official sources will help protect your device from the negative effects of the BlackRock Trojan.
