Passwords and 2FA Codes Stolen by the Android FluHorse Malware

The latest Android malware named ‘FluHorse’ has been discovered which targets Eastern Asian users with malicious apps that look like legitimate versions with over a million installs and are designed to steal personal data and spread malware. 

Check Point Research suggests that these malicious apps collect sensitive information from your device, including your credentials and the code for your Two-Factor Authentication (2FA) service. 

A person who falls for this trick is likely to give out sensitive personal details that could eventually be misused by criminals like passwords and banking details. 

Several researchers have given the malware the name “FluHorse”, reporting that it has been active for a year and its operators still run it. To spread malware, they sent phishing emails to “high-profile” targets informing them that there was a problem with payment and that they would need to download an app to solve the issue.  

One of the most dangerous features of FluHorse is its ability to steal passwords and two-factor authentication codes from malware-infected devices. Additionally, according to Check Point’s report on this campaign, most of the app impersonations have over one million installs. 

Read the original article:

Passwords and 2FA Codes Stolen by the Android FluHorse Malware