Be wary if a screen asks you to update Chrome on your smartphone! This is the technique currently being used by a malicious app to steal all your personal data and empty your bank account!
If, while you are calmly browsing the Internet with your Android smartphone, you come across a page inviting you to update Google Chrome, do not click on it! You could very well infect your device with a dreaded virus. The teams from the cybersecurity company ThreatFabric recently discovered a new malware, which they called Brokewell, and suffice to say that it should wreak havoc!
This malware uses fake Chrome update invitations to trick you into installing the malware yourself. And suffice to say that it is not easy to distinguish a legitimate Chrome update prompt from a spurious One, because cybercriminals have made sure to perfectly copy the Internet giant in order to better deceive you. Once downloaded, the malware will implement several measures to steal your personal data, access banking applications, spy on you and take remote control of your device. Just that !
To do this, it superimposes dummy login windows on top of the banking application installed on your smartphone. While you naturally think of consulting your bank, you enter your login credentials, and all that remains for hackers to do is exfiltrate the data to use it to subsequently access your account. The virus can also steal session cookies in real time, spy on all information typed through the virtual keyboard, activate the microphone to record all sounds around you, including your conversations, and take over location location, call history and device technical data sheet.
One of the virus’s functions even allows you to capture all actions on the screen, such as swipes, text inputs and application activity. All this private data is then sent to hackers, who are aware of everything you do and can even interact with the interface, clicking on elements or entering text for you.
Caution is therefore required, especially as the virus receives very regular updates which allow it to bypass Android security measures. Also, to avoid unpleasant surprises, be careful when installing updates or new applications. Beware of pop-ups asking you to install an app or update and only use legitimate and safe sources like the Google Play Store to install or update your apps.
