Smartphone and tablet: Researchers warn about banking Trojan “Anatsa”

Shock for Android users: The dangerous banking Trojan “Anatsa” has its sights set on their devices! This nasty malware takes full control of infected smartphones and tablets and carries out transactions in the name of the unsuspecting victims. Main goal: to steal banking information and make fraudulent transfers.

But that’s not all – “Anatsa” can also Cryptocurrencies and spy on personal information about their victims. The experts from Federal Office for Security in Information Technology (BSI).

Google Play Store: Gateway for cyber criminals!

How does malware get onto your phone? Cybercriminals For example, they use the “Google Play Store” as a gateway to smuggle in more than 90 apps infected with malware, including programs infected with “Anatsa”.

Shocking figures: In total, the malicious apps have been installed more than 5.5 million times! The notorious Android banking malware “Anatsa” has targeted over 650 financial institutions, primarily in the USA, but increasingly also in Europe. Now German banks are also in the crosshairs!

“Anatsa” malware lurks in harmless apps!

“Anatsa” is currently spreading via Android apps in the official “Google Play Store”. These apps disguise themselves as harmless PDF viewers (“PDF Viewer – File Explorer”), QR code scanners (“QR Code & BarCode Scanner”) or smartphone cleaners (“Phone Cleaner – File Explorer”). But in reality they install the dangerous malware on the device.

Warning: In some cases, victims even receive an SMS with a link that leads to the download of such an app. The following applies: The apps must always be actively installed.

What to do if you have “Anatsa” on your smartphone?

In principle, you can smartphones “Disinfect” by removing the malicious app. A reputable virus scanner for Android systems, such as Avast, McAfee or Norton, is helpful.

The catch with “Anatsa”: The malware is cleverly designed and clings stubbornly to infected Android phones. The experts at the BSI recommend: “A factory reset may be necessary.”