Beware: GoldDigger Malware Drains Your Bank Accounts Without You Knowing

A new dangerous malware has been spotted on Android that can steal your money from banking apps.

Group-IB cyber security researchers have warned that they spotted this malware in July this year. Dubbed GoldDigger, the malware was released through two separate applications: one through a fake Vietnamese government portal and the other through a fake energy company.

Researchers believe that the hackers communicated with their victims through social networks, email messages and other common methods. Through these methods, they have directed their victims to at least a dozen fake Google Play websites to offer them to install some applications.

These apps, when installed on the device, perform routine tasks and request many access permissions. Perhaps one of the best ways to identify a dangerous app is if it asks for too many permissions. When the victim gives these permissions, GoldDigger starts by extracting sensitive data, such as passwords, and then moves to banking applications, searching and extracting login data to these applications, and finally allowing hackers access to He pays the sacrifice.

Researchers have said that GoldDigger is a unique piece of malware because it uses the integrated Virbox Protector software for hiding and encryption. Although Virbox Protector itself is legitimate, it has been used in GoldDigger for bad purposes and this has made the work of researchers more difficult.

It is not yet clear how many people are involved in this malware. Researchers have recommended that users take warnings seriously, download apps only from legitimate sources, and always pay attention to links they receive via email.