We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
78,131 News Articles

Banking malware found in Google Android Market

Hoax Fapp aimed to steal banking details

Mobile phone owners with handsets running Google's Android OS, such as the HTC Hero, could be at risk from cybercriminals trying to steal their bank account information.

According to Sophos, First Tech Credit Union has discovered the Droid09 app - which claimed to be a mobile banking application - on Android Market. Those that used the app would have seen their banking logons and passwords stolen by cybercriminals, possibly for use in ID theft.

The security vendor says it has not yet seen the malware, which has been removed from the Android app store.

"Although malware has previously emerged for jailbroken iPhones (such as the infamous Rick-rolling Ikee worm) the malicious applications have not made it onto users' iPhones via Apple's highly guarded AppStore," Graham Cluely from Sophos said in a blog.

"The Android marketplace, however, is not as closely monitored as Apple's equivalent, and adopts a more 'anything goes' philosophy. This, combined with the current buzz around new phones running Android such as the Google Nexus One, may make the platform more attractive to cybercriminals in future."

Cluely added that as more and more users inevitably take advantage of smartphones to access their bank accounts in the future, the temptation for hackers to exploit systems may become greater.

Mobile phone buying advice

See all mobile phone reviews

See also: Smartphones becoming major malware target


IDG UK Sites

6 cheapest 4K TVs in the UK 2014: Get a UHD telly without breaking the bank

IDG UK Sites

Apple MacBook Air (11-inch, 256GB, Early 2014) lab tests and benchmarks

IDG UK Sites

How to stop your parents opening and responding to phishing emails

IDG UK Sites

Google to ship first Project Ara developer boards in July