Godfather malware makes banking apps an offer they can’t refuse

Crooks are using an Android banking Trojan dubbed Godfather to steal from banking and cryptocurrency exchange app users in 16 countries, according to Group-IB security researchers The security firm first detected Godfather in June 2021 and as of October, the credential-stealing malware has targeted the users of more than 400 …

[Pascal Monett]

"a malicious application hosted on the Google Play Store"

Thank God Google scans all apps it hosts, right ?

[iron]

Re: "a malicious application hosted on the Google Play Store"

> The security researchers say they don't know exactly how Godfather infects devices.

> "While Group-IB was unable to obtain the payload, analysts believe that a malicious application hosted on the Google Play Store contained the Godfather Trojan,"

Or in other words that is pure speculation. Most apps are installed from Play so there's a good chance it came from there, for all they know the source could be a sideloaded APK hosted on a porn site.

[Zippy´s Sausage Factory]

Doesn't exclude Ukrainian I notice... makes me wonder if this comes from the Russian govt as a way of financing the war special military operation?

[ColonelDare]

Oh my!

I'm going to get my cheque book and paper statement ring binder.....

[Anonymous Coward]

Inconvenient but safer

Sod this, I’m going back to old school paper and pen and cheque book banking!

[Orv]

Re: Inconvenient but safer

Yeah, giving your complete account and routing number to everyone you pay certainly seems like a good way to protect your account...

[Anonymous Coward]

Another reason to bank in person only

Might not be the most convenient, but to prevent any of this, I only bank in person, and have ensured no internet access to my stuff.

Not giving the bad people a chance.