Threat actors are using Android’s WebAPK technology to lure unwary users into installing malicious web apps that are intended to collect sensitive personal information on Android phones.
According to analysts from CSIRT KNF, the attack started when victims received SMS messages advising them to upgrade a mobile banking application. “The message’s link pointed to a page where WebAPK technology was being used to install a malicious application on the victim’s device.”
The program poses as PKO Bank Polski, a major international provider of banking and financial services with its headquarters in Warsaw. RIFFSEC, a Polish cybersecurity company, was the first to reveal information about the campaign read more Hackers Exploit WebAPK to Deceive Android Users into Installing Malicious Apps.
Stay informed with the best cybersecurity news and raise your cybersecurity awareness with our comprehensive coverage of the latest threats, breaches, and solutions.