![fake app attack virus fake app attack virus](https://www.silicon.co.uk/wp-content/uploads/2017/03/scam-ads.png)
This malware, discovered in July, is a variant of the LokiBot trojan that attacks not just financial and banking apps, but also a massive list of well-known and commonly used brand-name apps on Android devices. If the victim should click on the button that purports to download the app, a trojan called BlackRock is installed on their system.
![fake app attack virus fake app attack virus](https://www.pandasecurity.com/en/mediacenter/src/uploads/2020/07/iphone-step2.gif)
However, upon closer inspection the fake website has red flags tipping off potential victims that something is off – such as the connection being HTTP rather than HTTPS, and the fact that the site uses the.
![fake app attack virus fake app attack virus](https://www.cybersecurity-insiders.com/wp-content/uploads/2017/01/Threats_1000x600-11.jpg)
It’s not known how this website is discovered by potential victims, but Stefanko told Threatpost the website is most likely spread via social media or third-party websites like forums. The fraudulent website (joinclubhousemobi) looks identical to the real Clubhouse website () – both tell users that they can join with an invite from an existing user, with a call to action: “Sign up to see if you have friends on Clubhouse who can let you in.” While the real website points to users to download the app on the store, the fake site tells users to get the app on Google Play.
#Fake app attack virus apk#
By contrast, legitimate websites would always redirect the user to Google Play, rather than directly download an Android Package Kit, or APK for short.” “However, once the user clicks on ‘Get it on Google Play’, the app will be automatically downloaded onto the user’s device. “To be frank, it is a well-executed copy of the legitimate Clubhouse website,” said Stefanko on Friday. To add a legitimacy to the scam, the fake app is delivered from a website purporting to be the real Clubhouse website – which “looks like the real deal,” said Lukas Stefanko, researcher with ESET. However, as of now the app is only available on Apple’s App Store mobile application marketplace – there’s no Android version yet (though plans are in the works to develop one).Ĭybercriminals are swooping in on Android users looking to download Clubhouse by creating their own fake Android version of the app. Despite being invite-only, and only being around for a year, the app is closing in on 13 million downloads. Researchers are warning of a fake version of the popular audio chat app Clubhouse, which delivers malware that steals login credentials for more than 450 apps.Ĭlubhouse has burst on the social media scene over the past few months, gaining hype through its audio-chat rooms where participants can discuss anything from politics to relationships.