Android malware DroidBot spreading… how are people still falling for this?

App Specific Question
1

A new Android malware named DroidBot is targeting banking users in Europe. It spreads using sideloading and pretends to be legit apps like Google Play Store or Chrome. It also uses Accessibility Services for extra control. Thoughts?

image
image950×473 45.7 KB

2

The original article gives more details: DroidBot: Insights from a new Turkish MaaS fraud operation | Cleafy Labs

3

Well, jokes on them… I don’t have any money to steal!

4

So apparently DroidBot tricks people into installing it by pretending to be official apps and asking for Accessibility permissions. The good news? Google Play Protect will flag it if you try to install it. The bad news? You’d have to be completely clueless to let this happen.

5

@Marlow
So basically this is targeting people who aren’t very tech-savvy.

6

Yet another reason why sideloading apps can be dangerous.

7

Dezi said:
Yet another reason why sideloading apps can be dangerous.

Or maybe just don’t install ‘superantivirus.apk’ from that spammy pop-up ad.

8

Palmer said:

Dezi said:
Yet another reason why sideloading apps can be dangerous.

Or maybe just don’t install ‘superantivirus.apk’ from that spammy pop-up ad.

Actually, the article says scammers are using social engineering tactics to get people to install it. It’s not from ads.

9

@Luca
Fair point. Let me correct myself: don’t install random apps sent by shady people.

10

Palmer said:
@Luca
Fair point. Let me correct myself: don’t install random apps sent by shady people.

One common method nowadays is scam comments. Sometimes you’ll see a top comment on a post with hundreds of replies linking to sketchy websites.

11

Palmer said:

Dezi said:
Yet another reason why sideloading apps can be dangerous.

Or maybe just don’t install ‘superantivirus.apk’ from that spammy pop-up ad.

Still, the safest option is just not to sideload apps. Some malicious apps have very convincing names and descriptions.

12

Dezi said:
Yet another reason why sideloading apps can be dangerous.

So it’s like saying pencils are dangerous because John Wick used one as a weapon. The real advice? Don’t install weird apps from random places.

13

Dezi said:
Yet another reason why sideloading apps can be dangerous.

FYI, this isn’t limited to sideloading. Check this out: SpyLoan Android malware on Google Play installed 8 million times

14

@Hal
Pointing to something else doesn’t prove your point. Apple has its share of problems too: Delete These Apple App Store Apps With Malware | Lifehacker