Feeds

Secluded HijackRAT: Monster mobile malware multitool from HELL

Probably has feature for getting banking details out of horses' hooves

The Power of One eBook: Top reasons to choose HP BladeSystem

Cybercrooks have brewed up a malicious Android app that bundles a raft of banking fraud tricks into a single strain of mobile malware.

The Secluded HijackRAT is banking trojan that packs together new and previously unseen tricks, according to net security firm FireEye. The mobile nasty combines private data theft, banking credential theft, spoofing and remote access into a single malicious app. Android malware to date typically has only had one of these capabilities built-in.

Under the control of hackers, the app steals SMSes and contact lists and can send SMSes. It can initiate malicious app updates and scan for banking apps installed on the phone and replace them with fake utilities. The malware also attempts to disable any mobile security software that might be installed on a compromised device.

The current version of the malicious app scans for eight Korean banking apps and replace them with fake ones.

"While it is limited to just the 8 Korean banks right now, the hacker could easily add in the functionality for any other bank with about 30 minutes of work," according to FireEye.

Unfinished functionality built into Secluded HijackRAT might eventually facilitate bank hijacking attacks, according to an analysis of the mobile malware by FireEye. Such attacks would be possible because of the combination of personal information slurped from compromised devices combined with the introduction of counterfeit banking apps on pwned Android smartphones and tablets.

Although Secluded HijackRAT disguises itself as a “Google Service Framework" it has no affiliation with the Google Play Store. ®

Designing a Defense for Mobile Applications

More from The Register

next story
DARPA-derived secure microkernel goes open source tomorrow
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
Four fake Google haxbots hit YOUR WEBSITE every day
Goog the perfect ruse to slip into SEO orfice
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.