bank accounts Archives

AppWizard

July 5, 2026

Android users warned about fake app stealing bank details

A malicious application posing as a document reader has been downloaded over 100,000 times and installs the Anatsa banking trojan on Android devices. This app has bypassed Google's security checks and remains available on the Play Store. The Anatsa Trojan is designed to steal sensitive financial information by monitoring users' banking apps and intercepting login processes through a fake overlay that mimics legitimate interfaces. It requests extensive permissions, allowing it to observe screens, capture keystrokes, and interact with the device. Users are advised to review installed applications and monitor bank statements for unauthorized activity.

Tech Optimizer

June 9, 2026

Fake ChatGPT download site infects Windows and Mac users with malware

A counterfeit website, openew[.]app, is impersonating OpenAI's official ChatGPT download page and distributing malware. Windows users who download from this site receive a credential-stealing malware loader, while macOS users are infected with Odyssey Stealer, a variant associated with cryptocurrency theft. The fake site mimics the legitimate ChatGPT interface and uses HTTPS to appear trustworthy. The Windows malware, Chat_GPT.exe, creates a back channel to an attacker-controlled server, while the macOS malware captures sensitive data and attempts to replace legitimate cryptocurrency wallet applications with compromised versions. Users who download from official sources remain safe, but those who click on ads or unfamiliar links risk compromising their online accounts and sensitive information. Malwarebytes offers protection against this malware. Indicators of compromise include specific file hashes and network indicators associated with the malicious site.

AppWizard

May 30, 2026

Concerned about privacy on your Android? Here’s why Bitdefender is your all-in-one solution

Privacy on Android can be compromised through routine activities like checking bank accounts, shopping online, or using public Wi-Fi. Bitdefender Antivirus Plus offers comprehensive security features, including phishing protection, scam detection, VPN capabilities, and app security. Its VPN encrypts internet connections and routes traffic through secure servers to minimize tracking and protect data from third-party access. Bitdefender also monitors applications for suspicious behavior and blocks threats, ensuring security across the Android ecosystem. The software operates autonomously in the background, scanning for threats and applying protective measures without requiring constant user intervention.

AppWizard

May 20, 2026

Nationwide banking app update ahead of Fairer Share £100 decision

Beginning Thursday, Nationwide customers can conceal payment references on incoming bank transfers within the app. This feature aims to help prevent abusers from using banking systems to maintain unwanted contact and control over survivors. Domestic abuse charities have raised concerns about payment references being used for harassment, with some abusers sending messages or threats through these references. Nationwide's initiative empowers customers to control what is visible in their accounts. Approximately 4.2 million women in the UK have experienced economic abuse, which can include controlling bank accounts and monitoring financial activity. Nationwide's vulnerability support team assisted 312 customers facing abuse in 2025, an increase from 213 the previous year. The organization has also established “safe spaces” in hundreds of branches for domestic abuse support. Campaigners urge other banks to assess how banking features might be exploited by abusers, and Nationwide is considering extending similar functionalities to Virgin Money customers in the future.

AppWizard

May 12, 2026

This devious Android malware has returned disguised as TikTok or streaming apps — and is now using blockchain to remain undetected

Researchers at ThreatFabric have identified a new variant of the TrickMo banking trojan, named TrickMo.C, targeting Android users in Europe since January 2026. TrickMo.C disguises itself as popular applications like TikTok and streaming services, using tactics such as phishing overlays to harvest login credentials and sensitive information. It can log keystrokes, record screens, livestream content, intercept SMS messages, suppress OTP notifications, modify the clipboard, filter notifications, and capture screenshots. The primary targets are in France, Italy, and Austria, allowing unauthorized access to bank accounts and cryptocurrency wallets. TrickMo.C distinguishes itself by using the TON network for communication, which enhances anonymity and complicates detection efforts.

AppWizard

April 28, 2026

10,000 Users Exposed As Fake Document Reader App Delivers Anatsa Banking Trojan

Security researchers from ThreatLabz discovered a malicious document reader app on the Google Play Store that delivered the Anatsa Android banking trojan. The app, which had over 10,000 downloads before its removal, disguised itself as a legitimate file management tool using the package name com.groundstation.informationcontrol.filestationbrowsefilesreaddocs. It employed a "dropper" technique to hide its malicious code, connecting to an external server to retrieve the malware payload after installation. Anatsa is designed to steal financial information by overlaying a fake login screen over legitimate banking apps, capturing user credentials and enabling unauthorized transactions. Users are advised to delete the app and monitor their financial accounts. Technical indicators for identifying infections include the Anatsa Installer SHA256 (5c9b09819b196970a867b1d459f9053da38a6a2721f21264324e0a8ffef01e20), Payload URL (http://23.251.108[.]10:8080/privacy.txt), Payload SHA256 Hash (88fd72ac0cdab37c74ce14901c5daf214bd54f64e0e68093526a0076df4e042f), and Command and Control servers (http://172.86.91[.]94/api/ and http://193.24.123[.]18:85/api/).

AppWizard

February 21, 2026

Android users put on high alert: Malware hides in TV streaming apps

A new strain of malware called Massiv has been identified by the fraud detection firm ThreatFabric. This malware disguises itself as legitimate IPTV applications to steal financial information and identities. IPTV refers to Internet Protocol Television, often associated with unauthorized content streaming. Many of these malicious apps are not found on reputable platforms, leading users to unofficial sources where malware can be embedded. The malware can monitor screens in real-time and extract data from the phone's Accessibility Service, allowing attackers to interact with devices without users' knowledge. Cybercriminals can then open bank accounts in victims' names, leading to debts with banks the victims have never interacted with. ThreatFabric has noted an increase in fake IPTV applications used for malware delivery, particularly in Portugal, Spain, France, and Turkey. Many of these apps do not provide free content but instead deliver malware. Users are advised to avoid sideloading applications from untrusted sources.

AppWizard

February 20, 2026

Dangerous Massiv Android malware poses as IPTV app to infect devices and steal banking info

Security researchers from ThreatFabric have identified a deceptive application named “Massiv,” which masquerades as a legitimate IPTV service but is actually a banking trojan designed to compromise users' financial security. The malware primarily targets users in Portugal, using tactics like screen overlays and keylogging to steal sensitive data. Many users download unofficial IPTV apps, which are often fraudulent and do not provide access to pirated broadcasts. The stolen information is exploited by cybercriminals to open fraudulent bank accounts and launder money, putting victims in precarious financial situations and posing risks to the integrity of financial systems.

AppWizard

January 27, 2026

Wire Secure Messenger Review (2026 Test Results)

The rise of online conversations has highlighted the vulnerabilities of traditional messaging platforms, making secure messaging essential for protecting private communications. Entities such as corporations, hackers, and government agencies aim to monitor and exploit these communications. Without secure messaging services, users' messages are susceptible to interception. Remote work has intensified these risks, as home networks often lack necessary security measures. Several secure messaging apps have emerged, each with varying levels of protection. Signal is noted for its end-to-end encryption, open-source foundation, and self-destructing messages, although it requires a phone number for registration. Threema offers anonymous messaging without data collection and does not require personal information, but it lacks a free version. Telegram has over 500 million users and offers some end-to-end encryption features, but not all communications are secure by default, and it logs user data. Messaging platforms to avoid include WhatsApp due to privacy concerns from its ownership by Facebook, Keybase after its acquisition by Zoom, and regular unencrypted SMS messages. When selecting a secure messaging app, look for end-to-end encryption, third-party testing, open-source code, self-destructing messages, limited data collection, and anonymous signup options. Signal is widely regarded as the most secure and private messaging app.

AppWizard

January 14, 2026

Google Wallet on Android looks to be that one-stop shop for your purchase history

A recent Google Play Services update is set to enhance Google Wallet on Android by providing users with a comprehensive overview of their digital payments, including a detailed transaction history for purchases made across various devices. This update will allow users to view transactions linked to their digital cards without needing to toggle between apps or log into bank accounts. Previous enhancements to Google Wallet include Live Updates for travel, which provide real-time information for flights and trains, and location-based technology that displays relevant digital passes on users' lock screens as they approach specific venues. Additionally, Android 16's Live Updates feature has expanded to provide timely information about transport schedules on users' lock and home screens.