Schoolyard Bully Trojan Apps Stole Facebook Credentials from Over 300,000 Android Users

Far more than 300,000 customers throughout 71 countries have been victimized by a new Android menace campaign named the Schoolyard Bully Trojan.

Largely made to steal Facebook credentials, the malware is camouflaged as authentic education and learning-themed apps to entice unsuspecting buyers into downloading them.

The applications, which have been obtainable for down load from the formal Google Engage in Retail store, have now been taken down. That explained, they however go on to be available on 3rd-party app retailers.

“This trojan employs JavaScript injection to steal the Fb credentials,” Zimperium researchers Nipun Gupta and Aazim Monthly bill SE Yaswant mentioned in a report shared with The Hacker Information.

It achieves this by launching Facebook’s login web page in a WebView, which also embeds inside of it destructive JavasCript code to exfiltrate the user’s phone variety, email deal with, and password to a configured command-and-manage (C2) server.

The Schoolyard Bully Trojan additional makes use of indigenous libraries such as “libabc.so” so as to steer clear of detection by antivirus remedies.

When the malware singles out Vietnamese language apps, it has also been discovered in a number of other applications available in more than 70 nations, underscoring the scale of the attacks.

The findings appear additional than a yr after Zimperium unearthed comparable action aimed at compromising Fb accounts by means of rogue Android apps as portion of a campaign codenamed FlyTrap.

“Attackers can result in a whole lot of havoc by thieving Facebook passwords,” Richard Melick, director of cellular threat intelligence at Zimperium, reported. “If they can impersonate someone from their legit Fb account, it turns into incredibly easy to phish mates and other contacts into sending funds or delicate data.”

“It can be also quite concerning how numerous folks reuse the exact passwords. If an attacker steals someone’s Facebook password, you will find a significant chance that exact email and password will get the job done with banking or economic applications, corporate accounts and so significantly more.”

Located this report appealing? Stick to us on Twitter  and LinkedIn to study extra distinctive articles we publish.

Some parts of this post are sourced from:
thehackernews.com