Shulou(Shulou.com)11/24 Report--

CTOnews.com, July 25 (Xinhua)-- Security company McAfee has discovered a series of malicious SpyNote Trojan attacks in Japan, which focus on Android users. Hackers send a series of phishing emails under different names, prompting users to install various "fake" government App. After installation, users' fees will be embezzled and data leakage will be exposed.

▲ Tuyuan McAfee learned that since June 7, hackers have been pretending to be Tokyo Electric Power Company and Tokyo Metropolitan Waterway Bureau (Tokyo Water supply Company) to send phishing text messages and emails to users, claiming that users will soon face power and water outages due to abnormal payment of electricity or water bills, and attach a web site to ask users to confirm.

▲ image source McAfee

▲ Picture Source McAfee once users click on the link, the phone will download the "shanzhai" Tokyo Electric Power Company, Tokyo Metropolitan Waterway Bureau App through a web browser. After installing these copycat software, the phone will be infected with malicious Trojan SpyNote.

McAfee said that the Trojan can use Android's auxiliary features to gain certain permissions to steal user information from the phone, such as mobile phone information, contact list, text message content, phone records and so on. In addition, the Trojan can steal 2FC dynamic passwords from Google Authenticator, as well as account passwords for social media channels such as FaceBook and Twitter.

CTOnews.com attached a list of relevant "copycat" Japanese government App packages provided by McAfee as follows:

▲ image source McAfee

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.