Keep your Android device updated and use a reliable mobile security solution ESET products detect and block these malicious apps as Android/, Android/ and Android/Spy.Banker.

Only enter your sensitive information into online forms if you are sure of their security and legitimacy.

Pay attention to the number of downloads, app ratings and reviews when downloading apps from Google Play.

Only download apps from Google Play this does not ensure the app is not malicious, but apps like these are much more common on third-party app stores and are rarely removed once uncovered, unlike on Google Play.

Only trust mobile banking and other finance apps if they are linked from the official website of your bank or the financial service.

To avoid falling victim to phishing and other fake financial apps, we recommend that you: It is convenient for you to copy and save.

You can get a lot of names for reference. You just need to select numbers of fake name you like to generate, and then select the format to list fake names like JSON, CSV, and XML. Users of the Bitpanda cryptocurrency exchange who think they have installed the fake mobile app are advised to check their accounts for suspicious activity and change their passwords. With this name generator, you can generate countless names. If there have been unusual transactions, contact your bank. If you suspect that you have installed and used one of these malicious apps, we advise you to uninstall it immediately.Īlso, change your credit card PIN codes as well as internet banking passwords and check your bank accounts for suspicious activity. The apps then present their victims with a “Congratulations” or “Thank you” message (an example can be seen in Figure 3), which is where their functionality ends.įigure 3 – Final screen displayed by one of the malicious apps How to stay safe If users fill out such a form, the submitted data is sent to the attacker’s server. While the apps don’t follow one common procedure, upon launch they all display forms requesting credit card details and/or login credentials to the targeted bank or service (examples can be seen in Figure 2). The full list of targeted banks and services can be found at the end of this article. Some of the apps take advantage of the absence of an official mobile app for the targeted service (such as Bitpanda), while others attempt to fool users by impersonating existing official apps. The sole purpose of these malicious apps is to obtain sensitive information from unsuspecting users. The apps use obfuscation, which might have contributed to their slipping into the Store undetected. The apps were uploaded under different developer names, each using a different guise code similarities, however, suggest the apps are the work of a single attacker. The malicious fakes were uploaded to Google Play in June 2018 and were installed more than a thousand times before being taken down by Google. Figure 1 – Six of the malicious apps found on Google Play

Fake app names