Android malware asks the victim to selfie with passport – Security … – Security.nl

There is a new instance of malware for the Android platform discovered that credit card information is trying to steal and victims also asks for a selfie with their passport. The Acecard Trojan masquerades as a porn app, Flash Player or plug-in for video playback.

Once active, it monitors the malware, the use of specific apps. Once the user has such an app will open to let the malware phishingvenster see that Google Play looks like it is coming and asking for credit card information is requested. The name, dates of birth, phone number, expiration date and ccv code. Depending on the type of credit card that the user enters, asks the malware for a second factor of authentication. For example, an identity card or passport number.

As the last step can be victims of their “identity confirmation”. First, there should be a picture of the front and back of the id card, driving license or passport will be made. If the latter is there to have a selfie asked where the target is the document next to his or her face. “Attackers want not only the credit card numbers and different authenticatiefactoren, but also a picture of the victim with an identity document to various other systems to approach”, says Carlos Castillo from security company McAfee. To infection with the malware to prevent users get the advice no apps from untrusted sources to download.