Clone app that steals usernames spotted in Google Play Store

google-play-store

A malicious cloned banking app has cast doubt on the security of the Google Play store. In a blog post, mobile security company Lookout announced that it uncovered malware that steals user credentials.

The cloned app, called BankMirage, targets customers of an Israeli financial institution called Mizrahi Bank. According to Lookout, the creators of the malware put a wrapper around the bank’s legitimate app and redistributed the clone in the Google Play Store. 

When a user opens the app, a login form is loaded and the app collects user IDs as credentials are being entered. Once the user ID has been stolen, the app displays a login failed message and directs users to reinstall the official Mizrahi Bank app from the Play Store. 

Oddly, the creators of the cloned app only target user IDs, not passwords. In the code for the malware, the developers inserted a comment that directs the software to only collect user IDs.     

“Unfortunately, with an app that sneaks into the Google Play Store, it’s hard to use traditional means to protect yourself. For example, looking to see if this is a developer you trust, or making sure your phone has ‘Unknown sources’ is unchecked to prevent dropped or drive-by-download app installs,” the Lookout report reads.

“You can, however, go on some instincts. For example, if you see a duplicate of the app you’re trying to download, one might not be legitimate. You can otherwise keep yourself safe by installing an app-scanning security solution on your phone, such as Lookout.”

The discovery comes just days after researchers announced a major security flaw in the Google Play Store itself. The bug, which was unveiled by experts from Columbia University, affected secret keys in Play Store software. The researchers created an app called PlayDrone and found that developers stored secret keys in apps, which is said to be tantamount to writing the PIN number on ATM cards. The information can be used to steal user data from social networks like Facebook.  

Lookout has alerted Google to the BankMirage malware. The app has since been removed.

Computing

PewDiePie supporters hack printers, hope to boost his subscription numbers

In an attempt to garner more subscribers for their favorite vlogger and secure his status as having the most YouTube subscribers, PewDiePie supporters claimed to have hacked thousands of printers worldwide.
Mobile

These parental control apps will help keep your kids' device habits in check

Looking for extra security and monitoring on mobile devices? Take a look at the best parental control apps for limiting time and keeping watch on your child's phone usage and behavior. We have the top options for Android and iOS here.
Smart Home

With a simple command, Alexa can arm all your security devices

Alexa customers can query status plus arm or disarm home security systems several companies. New Alexa Guard skills set your home to away mode, send alerts when alarms or sensors go off, and contact home security monitoring services.
Smart Home

These wireless security cameras are a wire-free way to protect your home

Home security cameras can give you piece of mind, but if they have wires, are limited in where you can put them. We've rounded up the best battery-operated home security cameras to give you flexibility along with your security.
Mobile

How to use Samsung’s Bixby assistant for all of your smartphone tasks

Samsung Bixby is a powerful tool, but not the most intuitive one we've encountered. Here's how to set up and use every feature of Samsung's digital assistant, as well as what to expect in the future.
Mobile

Declutter your life with our favorite wireless chargers for Android and iPhones

We checked out the best wireless phone chargers to make tangles and uncooperative ports a thing of the past. Whether you have an iPhone or Android, find out which wireless charging pads are worth buying, and how their features compare.
Product Review

With sapphire glass and analog dials, you'd never know this watch is smart

The world of hybrid smartwatches is getting much larger, and the latest comes from a name with history — New York Standard Watches. In our NYSW GTS Activity Tracker review, we find out what makes this watch special, and why we were so…
Mobile

Microsoft patent filing shows wearable that mitigates involuntary movements

A patent application from Microsoft has shown the company is looking into using wearable technology to alleviate symptoms from various diseases and disorders that cause involuntary movements.
Mobile

AT&T makes 5G a reality for a dozen U.S. cities, with more to come in 2019

Ready to experience a radical transformation in mobile communication? AT&T is launching mobile 5G in cities across the country over the next few months. Here's everything you need to know about the AT&T 5G rollout.
Mobile

5G’s arrival is transforming tech. Here’s everything you need to know to keep up

It has been years in the making, but 5G is finally becoming a reality. While 5G coverage is still extremely limited, expect to see it expand in 2019. Not sure what 5G even is? Here's everything you need to know.
Mobile

Scientists have charged a phone and a Fitbit with solar-powered clothes

Scientists from Britain's Nottingham Trent University have discovered a way to incorporate solar panels into clothing, and they've even managed to charge a phone and Fitbit with the energy created.
Mobile

The Lenovo Z5 Pro GT packs the most RAM ever seen in a smartphone

The next generation of smartphones has begun, and it's begun with a bang. The Lenovo Z5 Pro GT comes with the next generation Snapdragon 855 processor, 12GB of RAM, and 512GB of storage.
Mobile

Which smartphone manufacturers won and lost in 2018

As the curtain comes down on 2018, we take a look at the big successes and failures in the smartphone market over the last 12 months. Which phone maker had the best year, and who had a year to forget?
Mobile

The best iPhone XS Max screen protectors to safeguard that huge display

If you love big screens, then the iPhone XS Max's huge 6.5-inch display is perfect for you. But it won't fare well against concrete. Protect your display with the best iPhone XS Max screen protectors.