855-255-1550 855-978-7252 HOME IS THIS YOU? SERVICES WHY ABSOLUTE LOGIC SUPPORT CENTER BLOG ABOUT US Blog Android Malware Named MasterFred Seeks User App Login Information Posted by absolutelogic On November 27, 2021 Share If you have an Android device be aware that there's a new strain of malware out there. Called MasterFred this new malware utilizes well-constructed fake login overlays in order to steal the login and credit card information for Twitter Instagram and Netflix users. A sample of the code was submitted to VirusTotal in June of 2021 when the malware was first spotted in the wild. Independent analyst Alberto Segura shared a second sample online a week ago with the note that the malware he sampled was used against Android users in Turkey and Poland. Avast Threat Labs got their hands on the sample and discovered APIs provided by the built-in Android Accessibility Service were utilized to display the malicious overlays. Avast Threat Lab had this to say about their research: "By utilizing the Application Accessibility toolkit installed on Android by default, the attacker is able to use the application to implement the Overlay attack to trick the user into entering credit card information for fake account breaches on both Netflix and Twitter." While not new or innovative it is a clever bit of code relying on elements native to the device under attack to help the malware accomplish its mission. That's not to say that MasterFred isn't innovative in other ways however. For instance it uses a dark web gateway called Onion.ws to deliver the login and credit card information it steals to its command and control server. Note that briefly MasterFred was found on the Google Play store embedded in a legitimate app. That app was removed but given its presence there (however temporarily) it stands to reason that the hackers are also pushing their malware out to third party app vendor sites as well. Stay vigilant. MasterFred certainly won't be the last threat we see this year. Used with permission from Article Aggregator Related Posts Free Repairs Offered For iPhone 12 Users With Sound Issues Over 5 Million Marriott Customers Vulnerable In Latest Data Breach Watch Out For Vaccine Survey Phishing Emails Windows 10 Might Get Rid Of Control Panel Feature Microsoft Edge Will Redirect Users To HTTPS Secure Sites FREE REPORT What Every Business Owner Must Know About Hiring an Honest, Competent, Responsive and Fairly Priced Computer Consultant This Business Advisory Guide Will Arm You with 21 Revealing Questions You Should Ask Any Computer Consultant before Giving Them Access to Your Company’s Network First Name * Last Name * Email * Phone Company GET MY FREE COPY Contact Absolute Logic 88 Danbury Road Suite #1D Wilton, CT 06897-1329 Phone: 203-936-6680 855-978-7252 Email: info@absolutelogic.com Latest Articles Most Bait Phishing Attacks Target Gmail Accounts November 26th, 2021 Legacy Contacts Shares Data From Those Who Have Passed November 25th, 2021 Social Media Facebook Twitter LinkedIn YouTube RSS Feed © Copyright 2021 Absolute Logic Privacy Policy