Mobile & Wireless

Banking trojans abuse Android accessibility services in new campaign

Fake utility apps request accessibility access, then read one-time codes and overlay bank login screens.

OTPcodes intercepted
In briefFake utility apps request accessibility access, then read one-time codes and overlay bank login screens.

The apps were distributed through third-party stores and links in text messages.

Once granted accessibility access they can read the screen, approve their own permissions and intercept codes.

Filed under Security ArchitectureMobile & Wireless

Does this story affect you?

Tell us about your environment and a SentriXa security editor will get back to you within one business day.