Android: Escobar malware disguises itself as an antivirus to empty your bank account

Malware called Escobar is currently targeting Android smartphones. Disguised as an antivirus, the malware is capable of stealing your bank details and your cryptocurrency without your knowledge.

On March 3, 2022, computer security experts from the MalwareHunterTeam discovered the presence of new Android malware on the web. According to researchers, this computer virus was once deployed under the name Aberebot. Now, the malware calls itself “Escobar” in reference to the notorious drug lord Pablo Escobar.

To deceive the vigilance of Internet users, hackers have disguised the Escobar malware as an antivirus. The malware pretends to be the APK file of McAfee, the famous antivirus. The corrupted file is currently spreading on the web. If you are satisfied with the applications present on the Play Store, you are not likely to fall into the hands of hackers.

Read also: Malware attacks on smartphones are up 500% in Europe

Escobar malware targets 190 Android banking, crypto or financial apps

Once installed on its victim’s Android smartphone, Escobar will take full control of the device. The malware will in particular seize data such as SMS, browsing history, phone call recording, stored photos, videos or even the geographical position of the user.

But, Escobar’s main objective is not espionage, Bleeping Computer explains in an investigation. The malware is designed to allow attackers to steal money from users’ bank accounts. To obtain the identifiers allowing log in to your bank account, the malware will superimpose a dummy window on top of an application. The victim will then enter his identifiers without realizing the deception.

Note that the virus is perfectly equipped to bypass possible security measures. He is indeed able to obtain codes sent by Google Authenticator or codes sent by SMS. Apparently, the Escobar malware is capable of hacking 190 banking, finance and cryptocurrency applications.

The virus is offered on the dark web through a subscription. Hackers keen to deploy Escobar must pay $3000 per month. The price will jump up to $5,000 once the development of the virus is complete. We advise you to be careful if you install APKs online.

Source: Bleeping Computer