SAFETY:
Finland’s Transport and Communications Agency (Traficom) warns of an ongoing Android malware campaign attempting to break into online banking accounts.
The agency has warned against several cases of SMS messages written in Finnish instructing recipients to call a number. The scammer who answers the call instructs victims to install a McAfee app for protection.
The messages are supposedly sent from banks or payment service providers such as MobilePay, and they use spoofing technology to appear as if they are coming from a domestic telecom operator or local network.
However, the McAfee app is malware that enables threat actors to breach victims’ bank accounts.
Only on Android
– According to reports received by the Cyber Security Center, targets are encouraged to download a McAfee application, reads the alert according to Bleeping Computer.
– The download link offers an .apk application outside the app store for Android devices. However, this is not antivirus software, but malware to be installed on the phone.
OP Financial Group, a major financial services provider in the country, has also issued an alert on its website about the scam messages impersonating banks or national authorities.
The police also highlighted the threat, warning that the malware enables the operators to log into the victim’s bank account and transfer money. In one case, a victim lost 95,000 euros.
Traficom says that the campaign exclusively targets Android devices, and there is no separate infection chain for Apple iPhone users.
