Investigattions by the rapid response team of Sophos, a cyber security firm, has revealed that most of the cryptocurrency investors are becoming targets for ransomware through face app login screens.
Thank you for reading this post, don't forget to subscribe!
The study mentions Flubot, a mobile malware family that wreaked havoc in 2021 as one of the most common banking trojans affecting Android users. The software resembles bank and cryptocurrency app login windows in order to collect the passwords of users. It not only steals bank account information, but also the contact information, which it then employs to spam the victim’s friends and associates with messages that can lead to more Flubot infections.
The malware is spread mostly by SMS text messages and seems like popular shipment companies such as DHL, FedEx, and UPS. The victim receives SMS warnings including a URL link, as well as the occasional SMS pretending to be a voicemail message containing a web link. Sophos also warns that automated botnet attacks, such as Mirai, have gained popularity in recent years, becoming the preferred method of delivering crypto-mining software. These minor codes can infect various corporate assets which can be used as a collective processing power of thousands of machines by cybercriminals to mine cryptocurrency and spread it further.
The report’s objective is to provide insight into the security threats and trends that organisations will face in 2022, as well as the threat landscape in 2021, with additional information on potential security breaches that could be employed in the future. The trend is expected to continue until global cryptocurrencies are better regulated, the cyber-security firm said.