Remote-controlled Android malware stealing banking credentials | ICT Security-Sécurité PC et Internet | Scoop.it
The malicious Android application targets specific well-known financial entities posing as a Token Generator application.

 

Security researchers at McAfee have discovered a malicious Android application capable of grabbing banking passwords from a mobile device without infecting the user’s computer.

 

The latest piece of Android Malware, dubbed FakeToken, contains man-in-the-middle functionality to hijack two-factor authentication tokens and can be remotely controlled to grab the initial banking password directly from the infected mobile device.