CYBERSECURITYTRACKER
Permanent story citation

Hirudo Android malware replaces banking apps to evade security checks

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10237

As cited

Copy frozen at (site build).

threat intel

Hirudo Android malware replaces banking apps to evade security checks

Hirudo, a newly identified Android malware, intercepts banking applications and replaces them with counterfeit versions that circumvent security mechanisms. The malware thereby harvests user credentials for compromised bank accounts. This attack pattern exploits the visual similarity between legitimate and fraudulent apps to deceive users into entering their login information.

Why it matters: Mobile banking users and financial institutions face direct losses from credential theft; practitioners should audit app store security controls and educate users on app verification methods to prevent installation of trojanized banking apps.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Hirudo Android malware replaces banking apps to evade security checks

Hirudo, a newly identified Android malware, intercepts banking applications and replaces them with counterfeit versions that circumvent security mechanisms. The malware thereby harvests user credentials for compromised bank accounts. This attack pattern exploits the visual similarity between legitimate and fraudulent apps to deceive users into entering their login information.

Why it matters: Mobile banking users and financial institutions face direct losses from credential theft; practitioners should audit app store security controls and educate users on app verification methods to prevent installation of trojanized banking apps.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary