SoumniBot: the new Android banker’s unique techniques


The creators of widespread malware programs often employ various tools that hinder code detection and analysis, and Android malware is no exception.

As an example of this, droppers, such as Badpack and Hqwar, designed for stealthily delivering Trojan bankers or spyware to smartphones, are very popular among malicious actors who attack mobile devices. That said, we recently discovered a new banker, SoumniBot, which targets Korean users and is notable for an unconventional approach to evading analysis and detection, namely obfuscation of the Android manifest.

Read more…
Source: Kaspersky


Sign up for our Newsletter


Related:

  • Former Military Cybersecurity Platform to Be Applied in Money Services Business (MSB) Sector

    August 13, 2017

    Recent cyber attacks have increased awareness security on the net. The cyber security market is one of the fastest growing industries in the past few years, due to the increasing penetration of the internet and growing adoption of cloud computing. The global cyber security market is expected to reach $181.77 billion in 2021, according to a report ...

  • WannaCry Hero Charged With Creating $7,000 Banking Malware

    August 3, 2017

    In an astonishing turn of events, the man who stopped the spread of the WannaCry ransomware earlier this year has been arrested and charged with creating a banking malware known as Kronos. Marcus Hutchins, also known as MalwareTech, was held in Nevada, just as he was getting ready to head home from the Las Vegas-based hacker conferences ...

  • $39 million cyber heist crooks caught by Omani agency

    August 2, 2017

    Omani forensic specialists helped track down online crooks who stole $39 million from a government bank, the director of the Internet Technology Agency has revealed. A cyber attack on an Oman bank in 2013 sparked a global manhunt across 24 nations that led to the arrests of seven people in the USA, according to Dr Badr ...

  • UniCredit Bank Hacked, 400,000 Accounts Exposed

    July 26, 2017

    UniCredit has just announced in an official statement that its servers were breached by hackers, with details of approximately 400,000 clients said to be exposed. The bank explained that hackers managed to get inside its systems in Italy twice in the last 12 months. The first hack took place in September and October 2016, while the ...

  • Bank of America Customers Under Attack, Phishing Site Hosted on Russian Server

    July 24, 2017

    You might be tempted to believe that hackers are getting tired of using phishing scams to target bank clients across the globe, but as Bank of America customers might find out the hard way, this doesn’t seem to be the case just yet. HackRead has come across a new major phishing attack aimed at BoA clients, ...

  • Lloyd’s says cyber-attack could cost $120bn, same as Hurricane Katrina

    July 17, 2017

    Lloyd’s of London has warned that a serious cyber-attack could cost the global economy more than $120bn (£92bn) – as much as catastrophic natural disasters such as Hurricanes Katrina and Sandy. Published two months after a ransomware cyber-attack that hobbled NHS hospitals and hit nearly 100 countries, a 56-page report from the world’s oldest insurance market ...