www.rivitmedia.comwww.rivitmedia.comwww.rivitmedia.com
  • Home
  • Tech News
    Tech NewsShow More
    Microsoft’s May 2025 Patch Tuesday: Five Actively Exploited Zero-Day Vulnerabilities Addressed
    7 Min Read
    Malicious Go Modules Unleash Disk-Wiping Chaos in Linux Supply Chain Attack
    4 Min Read
    Agentic AI: Transforming Cybersecurity in 2025
    3 Min Read
    Cybersecurity CEO Accused of Planting Malware in Hospital Systems: A Breach of Trust That Shocks the Industry
    6 Min Read
    Cloud Convenience, Criminal Opportunity: How Google Sites Became a Launchpad for Elite Phishing
    6 Min Read
  • Cyber Threats
    • Malware
    • Ransomware
    • Trojans
    • Adware
    • Browser Hijackers
    • Mac Malware
    • Android Threats
    • iPhone Threats
    • Potentially Unwanted Programs (PUPs)
    • Online Scams
    • Microsoft CVE Errors
  • How-To-Guides
  • Product Reviews
    • Hardware
    • Software
  • IT/Cybersecurity Best Practices
  • FREE SCAN
  • Cybersecurity for Business
Search
  • ABOUT US
  • TERMS AND SERVICES
  • SITEMAP
  • CONTACT US
© 2023 rivitMedia.com. All Rights Reserved.
Reading: Ghimob Malware Can Spy & Steal Users’ Bank Details from Hundreds of Android Mobile Apps
Share
Notification Show More
Font ResizerAa
www.rivitmedia.comwww.rivitmedia.com
Font ResizerAa
  • Online Scams
  • Tech News
  • Cyber Threats
  • Mac Malware
  • Cybersecurity for Business
  • FREE SCAN
Search
  • Home
  • Tech News
  • Cyber Threats
    • Malware
    • Ransomware
    • Trojans
    • Adware
    • Browser Hijackers
    • Mac Malware
    • Android Threats
    • iPhone Threats
    • Potentially Unwanted Programs (PUPs)
    • Online Scams
  • How-To-Guides
  • Product Reviews
    • Hardware
    • Software
  • IT/Cybersecurity Best Practices
    • Cybersecurity for Business
  • FREE SCAN
  • Sitemap
Follow US
  • ABOUT US
  • TERMS AND SERVICES
  • SITEMAP
  • CONTACT US
© 2022 Foxiz News Network. Ruby Design Company. All Rights Reserved.
malware
www.rivitmedia.com > Blog > Cyber Threats > Malware > Ghimob Malware Can Spy & Steal Users’ Bank Details from Hundreds of Android Mobile Apps
MalwareTech News

Ghimob Malware Can Spy & Steal Users’ Bank Details from Hundreds of Android Mobile Apps

riviTMedia Research
Last updated: October 20, 2023 6:25 am
riviTMedia Research
Share
Ghimob Malware Can Spy & Steal Users' Bank Details from Hundreds of Android Mobile Apps
SHARE

Brazil-based hackers have recently expanded their operations worldwide with a new banking Trojan targeting Android users in multiple Latin American and European countries and may soon hit US users. Kaspersky Labs recently discovered the “Ghimob” remote access Trojan (RAT) while investigating another malware campaign. Kaspersky describes the malware as arriving on mobile devices via email purporting to be about an outstanding debt.

Victims click on an embedded link in the email and end up downloading the Trojan on their devices. Once installed, Ghimob sends a successful infection message to an attacker-controlled server. The initial message includes data on the phone model, a list of all apps on the device, and whether the user has implemented lock-screen security. 

The Trojan prompts users to grant it full access rights on the Android device. Once installed, Ghimob gives attackers complete remote control of the device. They can take screenshots, use the microphone, and record all typed text. The Trojan can spy on 153 mobile apps, prevent manual uninstallation of apps, and install other apps from any source.

Ghimob also records and replaces any lock-screen pattern the user might have programmed to secure the device. Also, for fingerprint-based authentication, the malware can force a blackout screen on the phone. Because the malware uses the victim’s device to execute its crimes, most anti-fraud mechanisms at financial institutions trust the access and accept the device’s actions as legitimate. In addition to bank accounts, Ghimob also targets applications from financial services companies, exchanges, and cryptocurrencies.

Who is Behind Ghimob?

The group behind the Ghimob malware is Guildma, a Brazilian hacking group associated with a set of four banking Trojan families collectively referred to as Tetrade. In the past, the group has focused mostly on mobile users in Brazil. But now, the group has begun aggressively expanding its operations and is now a threat in countries including Angola, Germany, Mozambique, Paraguay, Peru, and Portugal.

You Might Also Like

How to Deal With 4dentoto.com
SwiftSeek: A Threat to Your Online Experience
Hilipinge.com Ads
Mobility Search Virus Browser Hijackers: A Guide to the Mobility Search Browser Virus
PrivateLoader: Unraveling the Sophisticated Threat
TAGGED:MalwareSpyware

Sign Up For Daily Newsletter

Be keep up! Get the latest breaking news delivered straight to your inbox.
By signing up, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy. You may unsubscribe at any time.
Share This Article
Facebook Copy Link Print
Share
Previous Article malware macOS Bundlore Loader Avoids Detection by Hiding its Payload Within a Named Fork
Next Article strop/Djvu Ransomware ITRZ Ransomware: How to Protect Yourself from the STOP/Djvu Ransomware Variant
Leave a Comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Scan Your System for Free

✅ Free Scan Available 

✅ 13M Scans/Month

✅ Instant Detection

Download SpyHunter 5
Download SpyHunter for Mac

//

Check in Daily for the best technology and Cybersecurity based content on the internet.

Quick Link

  • ABOUT US
  • TERMS AND SERVICES
  • SITEMAP
  • CONTACT US

Sign Up for Our Newsletter

Subscribe to our newsletter to get our newest articles instantly!

www.rivitmedia.comwww.rivitmedia.com
© 2023 • rivitmedia.com All Rights Reserved.
  • ABOUT US
  • TERMS AND SERVICES
  • SITEMAP
  • CONTACT US