The developers of the mobile banking trojan Gugi have introduced new modifications to sidestep two key security features of Android, reports Kaspersky Lab researcher Roman Unuchek via the Securelist blog.
A new phishing campaign targeting Android users in Russia threatens to steal the mobile banking credentials of mobile banking users, according to post on the Symantec blog.
Skype warned on Friday that its Android program could be susceptible to attack if its users also have installed a malicious application. Due to a "privacy vulnerability," criminals can leverage a rogue application to access and steal locally stored Skype for Android files, such as profile data and instant messages, Skype Chief Security Officer Adrian Asher said in a blog post. He said the company is working on "securing file permissions" so the attack can't happen and advised users to scrutinize any third-party applications they install. The issue was revealed by Android developer Justin Case.
Attached as a malicious APK file in a spear phishing email, once installed, the program siphons data that includes contacts, call logs, SMS messages, and more.