• Menu
  • Skip to main content
  • Skip to primary sidebar

The Cyber Security News

Latest Cyber Security News

Header Right

  • Latest News
  • Vulnerabilities
  • Cloud Services
schoolyard bully trojan apps stole facebook credentials from over 300,000

Schoolyard Bully Trojan Apps Stole Facebook Credentials from Over 300,000 Android Users

You are here: Home / General Cyber Security News / Schoolyard Bully Trojan Apps Stole Facebook Credentials from Over 300,000 Android Users
December 1, 2022

Far more than 300,000 customers throughout 71 countries have been victimized by a new Android menace campaign named the Schoolyard Bully Trojan.

Largely made to steal Facebook credentials, the malware is camouflaged as authentic education and learning-themed apps to entice unsuspecting buyers into downloading them.

The applications, which have been obtainable for down load from the formal Google Engage in Retail store, have now been taken down. That explained, they however go on to be available on 3rd-party app retailers.

✔ Approved From Our Partners
AOMEI Backupper Lifetime

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code


CyberSecurity

“This trojan employs JavaScript injection to steal the Fb credentials,” Zimperium researchers Nipun Gupta and Aazim Monthly bill SE Yaswant mentioned in a report shared with The Hacker Information.

It achieves this by launching Facebook’s login web page in a WebView, which also embeds inside of it destructive JavasCript code to exfiltrate the user’s phone variety, email deal with, and password to a configured command-and-manage (C2) server.

Schoolyard Bully Trojan

The Schoolyard Bully Trojan additional makes use of indigenous libraries such as “libabc.so” so as to steer clear of detection by antivirus remedies.

When the malware singles out Vietnamese language apps, it has also been discovered in a number of other applications available in more than 70 nations, underscoring the scale of the attacks.

The findings appear additional than a yr after Zimperium unearthed comparable action aimed at compromising Fb accounts by means of rogue Android apps as portion of a campaign codenamed FlyTrap.

“Attackers can result in a whole lot of havoc by thieving Facebook passwords,” Richard Melick, director of cellular threat intelligence at Zimperium, reported. “If they can impersonate someone from their legit Fb account, it turns into incredibly easy to phish mates and other contacts into sending funds or delicate data.”

“It can be also quite concerning how numerous folks reuse the exact passwords. If an attacker steals someone’s Facebook password, you will find a significant chance that exact email and password will get the job done with banking or economic applications, corporate accounts and so significantly more.”

Located this report appealing? Stick to us on Twitter  and LinkedIn to study extra distinctive articles we publish.


Some parts of this post are sourced from:
thehackernews.com

Previous Post: «Cyber Security News Researchers Accidentally Crash Cryptomining Botnet
Next Post: Eight Charged with $30m Unemployment Benefits Fraud Cyber Security News»

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Report This Article

Recent Posts

  • WhatsApp Unveils Proxy Support to Tackle Internet Censorship
  • Hackers Using CAPTCHA Bypass Tactics in Freejacking Campaign on GitHub
  • Blind Eagle Hacking Group Targets South America With New Tools
  • US Family Planning Non-Profit MFHS Confirms Ransomware Attack
  • Microsoft Reveals Tactics Used by 4 Ransomware Families Targeting macOS
  • Dridex Malware Now Attacking macOS Systems with Novel Infection Method
  • Cyber attacks on UK organisations surged 77% in 2022, new research finds
  • WhatsApp to combat internet blackouts with proxy server support
  • The IT Pro Podcast: Going passwordless
  • Podcast transcript: Going passwordless

Copyright © TheCyberSecurity.News, All Rights Reserved.