'FakeCall' Android Malware Can Now Hijack Bank Calls

[DrQ]

'FakeCall' Android Malware Can Now Hijack Bank Calls​

During installation, it asks the user to set itself as the default calling app. Once permitted, the malware gains significant control via Android's accessibility service and oversees all incoming and outgoing calls. If a user tries to call the bank, it reroutes the call to the attacker's number.​

 

[jp10558]

I mean, I'd ask people to know what they're agreeing to in the permissions, but people are stupid. Can't google just pull these from the play store as they show up?

 

[WaikikiFirst]

During installation, it asks the user to set itself as the default calling app

You lost me RIGHT THERE. Why would anyone ever agree to that on some new app. Is it The Wheel? Is it Sliced Bread? noooooooooooooooooooooooooop

 

[WaikikiFirst]

I'd ask people to know what they're agreeing to in the permissions

seems like the (legitimate, I assume) apps I look at all do that. I look at what they ask for & I say "Up yours". Next. Hard to expect malware to warn about their tirckery

 

[jp10558]

Also MSN is very click-baity - "MSN News : EVERY WALMART IN NY to shut down on a single day, "requiring careful planning from regular shoppers."" ... shutting down on Thanksgiving lol.

 

[DrQ]

You lost me RIGHT THERE. Why would anyone ever agree to that on some new app.

The point is to get the word out so that when a user accidentally clicks on a link, that request is a BIG RED FLAG!

 

[jp10558]

seems like the (legitimate, I assume) apps I look at all do that. I look at what they ask for & I say "Up yours". Next. Hard to expect malware to warn about their tirckery

Android forced them to ask for permissions. Malware can't get around that. This is what in the old days on PCs we'd call "not a news story" and user went out of the way to hurt themselves.

The exploit chain is
phishing e-mail
user goes to link or website to download and save APK
User goes and allows untrusted APK installs in Android
User finds APK installer app to install the APK
Says "Yes" to Android to install the app outside an app store.
USER NOW allows app to be "Default Caller app".

FFS - at some point, you have to figure the user is just bound and determined to get screwed over. Like, how many steps will someone go through because a rando send you an e-mail on your phone?

 

[Carolinian]

My Android is completely de-Googled and uses the Calyxo operating system instead, so I wonder if this is a danger? Calyxo is very privacy oriented, unlike Google itself which makes its money off selling your data.

 

[jp10558]

My Android is completely de-Googled and uses the Calyxo operating system instead, so I wonder if this is a danger? Calyxo is very privacy oriented, unlike Google itself which makes its money off selling your data.

It's a danger if you download a random APK and install it and set it as the default calling app.

 

[WaikikiFirst]

FFS - at some point, you have to figure the user is just bound and determined to get screwed over. Like, how many steps will someone go through because a rando send you an e-mail on your phone?

This exactly. The links here trying to save people from themselves will only resonate with people who don't actually need saving. PbS