A dangerous Android-based banking malware is rapidly spreading across the United States and Canada.
Anatsa is capable of stealing banking credentials using various methods including overlay attacks and keystroke logging attacks, reports Threat Fabric.
[adinserter block="1"]The banking malware can also conduct fraudulent transactions remotely from the infected Android devices.
Threat Fabric says Anatsa is being distributed on the US Google Play app marketplace under various guises such as a PDF update, a file manager, a document viewer, a phone cleaner and other legitimate-appearing apps. Once installed, an update transforms it into malicious software.
“Once the application gains a substantial user base – often in the thousands or tens of thousands of downloads – an update is deployed, embedding malicious code into the app.
This embedded code downloads and installs Anatsa on the device as a separate application.”
In the latest campaign, Threat Fabric says Anatsa was downloaded more than 50,000 times between June 24th and June 30th. Anatsa ranked third among the “Top Free Tools” category on the US Google Play app marketplace over that period.
While Anatsa has been active since at least 2020 and has enjoyed consistently high levels of success, the mobile cybersecurity firm says this is the third instance where the banking malware is focusing on mobile banking users in the US and Canada.
“The Anatsa malware campaigns continue to show a growing focus on North American targets, particularly mobile banking applications. The latest operation not only broadened its reach but also relied on well-established tactics aimed at financial institutions in the region.”
Follow us on X, Facebook and Telegram
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Surf The Daily Hodl Mix
Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.
Generated Image: Midjourney
