Is your Android smartphone really safe? A new malware called DroidBot is currently attacking eight major French banks, potentially putting the banking data of millions of users at risk.
A new danger threatens users of banking applications on Android. Since last June, sophisticated malware called DroidBot specifically targets eight major French banks.
An attack made in Turquie
Behind this cyberattack is a group of Turkish hackers who have developed particularly sophisticated malware. DroidBot doesn't just take a basic approach: it uses the B4A framework, a tool normally intended for developing legitimate Android applications. This approach allows it to blend seamlessly into the mobile app landscape, making it particularly difficult to detect.
The establishments targeted bring together the largest French banks: Boursorama, Crédit Agricole, LCL, La Banque Postale, Société Générale, CIC, Banque Populaire and Crédit Mutuel. A choice that is not random, these establishments representing a major part of the French banking market.
The strength of this malware lies in its ability to masquerade as completely normal applications, including security services or Google applications. Once installed, it leverages Android accessibility services.
The MQTT protocol, used by DroidBot, allows it to communicate discreetly with its control servers, allowing it to escape traditional detection systems.
The capabilities of the malware are impressive:
-- Interception of banking validation SMS
- Recording of keystrokes (keylogger)
- Creation of fake connection interfaces
- Takeover simulating user actions
Faced with this threat, several security measures are necessary. The first and most important: only download your banking applications from the official Google Play Store. Although this platform is not foolproof, it offers a significantly higher level of security than alternative sources.
To go further
Double authentication (2FA): why and how to secure your Google, Facebook, iCloud, Steam accounts, etc.
Two-factor authentication is also an effective safeguard. Ideally, choose an authentication method that does not use SMS, such as dedicated authentication applications or key pass.
It is also recommended to:
- Regularly check the permissions granted to your applications
- Systematically update your banking applications
- Never click on suspicious links received by email or SMS
- Monitor your bank statements regularly for suspicious activity
To go further
How to secure your smartphone, tablet or PC? The ultimate guide!
