Cybercriminals are adding file-encrypting features to traditional mobile banking trojans, creating hybrid threats that can steal sensitive information and lock user files at the same time.
One such trojan is called Faketoken and its primary functionality is to generate fake login screens for more than 2,000 financial applications in order to steal login credentials. The malicious app also displays phishing pages to steal credit card information, and it can read and send text messages.
Faketoken’s creators have added the ability to encrypt user files stored on the phone’s SD card sometime in July and have since released thousands of builds with this functionality, according to researchers from Kaspersky Lab.
To read this article in full or to leave a comment, please click here