New Android malware "Gustuff" targets crypto and fiat alike

28 Mar, 2019
by David Borman
Security
New Android malware Gustuff targets crypto and fiat alike

It is being reported by The Next Web that a new type of malware is going around affecting Android phones. This new trojan targets users of both cryptocurrency apps and top fiat banking apps, in one of the most comprehensive pieces of money stealing software ever made.

The malware, named "Gustuff," was first identified by Group-IB, a renowned cybersecurity firm. It comes with a wide array of ways to both spread itself and trick users into parting with their money. One major trick it uses is "web fakes," which are made to look identical to popular apps. In this case, a wide array of apps for both crypto and traditional finance are targeted, including Coinbase, BitPay, J.P. Morgan, Wells Fargo and more.

One other nasty trick it can do is auto-fill in data fields even in legitimate apps with malicious information. This means it can, say, change the Bitcoin destination address you provided with the attackers chosen address, or transfer money to an attackers account from a banking app. It can even affect/impersonate apps such as PayPal, Western Union, eBay, and WhatsApp.

Read more: Analysts state CoinBene's $105m transfer is consistent with exchange hacks

Gustuff is being spread through both unofficial marketplaces as well as SMS. It is not uncommon for malware to use a victim's contact list to spread malicious links so it can propogate itself. The best way to stay safe is to only download apps from the official Google Play store, and not click on any suspicious links in text messages, even if they seem to be from someone trusted.

Ultimately, users will have to be very careful, but like with most malware and scams, going slow, being suspicious and sticking to main channels of distribution are a good way to stay safe.

Bitcoin PRICE movement IMMINENT! What's next? Subscribe to the Chepicap YouTube Channel for more videos!

Follow Chepicap now on Twitter, YouTubeTelegram and Facebook!

Chepicap is here for you 24/7 to keep you informed on everything crypto. Like what we do? Tip us some Satoshi with the exciting new Lightning Network Tippin.me tool!

 

Read more: How to tip and receive Bitcoin via the Lightning Network with Tippin.me

Read more about: Bitcoin (BTC) Google

Poll

Do you use Android?

(1 votes)

Add a comment

Check out the latest news

You will be logged out and redirected to the homepage