All Android owners warned over copycat of popular app that can silently rinse thousands from your bank account

ANDROID owners worldwide must be cautious of a copycat app that is masquerading as McAfee antivirus software.

A fraudulent McAfee campaign was first discovered in 2021, however, the same ploy has since robbed thousands from unsuspecting victims.

Alamy

While Finnish authorities haven’t determined the type of malware, the attacks closely resemble the campaign Fox-IT analysts  discovered in 2021[/caption]

Finland’s Transport and Communications Agency (Traficom) recently said it had discovered multiple cases of the copycat app attempting to breach online bank accounts.

The agency said text messages to Android owners written in Finnish instruct recipients to call a number.

They can, for example, log into the online bank and transfer money… In one case, the victim of the crime lost 95,000 euros in the scam.

Finnish police

The messages are spoof messages, appearing as though they are being sent from banks or payment service providers.

Those who dial in actually end up calling a scammer, who instructs victims to install a McAfee app ‘for protection’.

But those who follow the instructions are actually installing malware onto their phone – leaving all their accounts at risk.

“Fraudsters use the software to take over the entire phone,” Finnish police explained.

“They can, for example, log into the online bank and transfer money.

“In one case, the victim of the crime lost 95,000 euros in the scam.”

This is not antivirus software but malware to be installed on the phone.

Traficom

“According to reports received by the Cyber Security Center, targets are encouraged to download a McAfee application,” Traficom writes in a statement.

“The download link offers an .apk application hosted outside the app store for Android devices.

“However, this is not antivirus software but malware to be installed on the phone.”

The OP Financial Group, one of Finland’s largest financial services providers, has also issued an alert on its website about the threat campaign.

TROJAN HORSE

Cybersecurity experts in NCC Group’s Fox-IT team first spotted the McAfee copycat banking trojan in early 2021.

A banking trojan is malware specifically designed to steal a victim’s financial information.

The campaign exclusively targets Android devices.

Cyber crooks rely heavily on the ability to masquerade as legitimate apps and software in the effort to fleece victims of their data and hard-earned cash.

In early April, experts explained how hackers had since given the copycat a sophisticated makeover, leaving Android owners more vulnerable than ever.

While Finnish authorities haven’t determined the type of malware, the attacks closely resemble the campaign Fox-IT analysts recently reported.

WHAT NOW?

Google is generally good at weeding out and removing risky apps from its platform, but a small number do slip through the cracks.

Make sure Google’s anti-malware tool Play Protect is active, as it can protect against this specific type of malware, known as Vultur.

Always check the reviews for apps – as these can be red flag warnings against downloading specific apps, particularly if there are not many reviews for a supposedly popular app.

If you think you’ve downloaded the dodgy McAfee copycat – delete it straight away.

You must also restore the infected Android device to Factory Settings – which wipes all data and apps.

You should also contact your bank immediately, so they can stop any unapproved cash transfers.