Android users being robbed by Malware infected flashlight apps

Malware infected torch apps are being used to infiltrate banking apps and steal money from unsuspecting Android users, cybersecurity experts have warned.
 
A report claims that "thousands of Android users" have had their devices infected after downloading free torch or gaming apps through Google Play.
 
Experts from ESET, Avast and SfyLab have dubbed the malware BankBot and warned devices are being infected around the world.
 
Once downloaded the apps monitor users, collect their bank login details and steal their money.
 
Google removed older versions of the apps within days, but some revisions remained active until November 17 infecting thousands, the report's authors have claimed.
 
The apps are hiding from Google checks by publishing under different developer names and postponing attacks on a device.
 
The malware was first seen hidden within apps including, Lamp for DarkNess, Tornado FlashLight and Sea FlashLight in October, the report says.
 
In a revised attack the malware was embedded in a Solitaire gaming app and smartphone cleaning app.
 
After the phone owner grants the app permissions it identifies banking apps and creates an overlay that appears when the user goes to log on, storing the information.
 
The sophisticated attack can also break through two-factor authentication intercepting text messages to gain access to your banking app.
 
The report warns people not to download apps with few or poor ratings, and to uninstall banking apps and contact banks if you notice anything suspicious.

---