A new Android malware called “Massiv” is on the rise. Security researchers at ThreatFabric uncovered the large-scale campaign, in which hackers disguised and distributed the malware as a harmless IPTV streaming app. Once installed, however, the app was able to read screen inputs to steal passwords and bank details.
The malware is classified as highly dangerous and uses screen overlays and keylogging to obtain sensitive data. It can even bypass the usual protection mechanisms of banking apps, which are designed to guard against the capture of on-screen content.
According to the researchers, the malware can even be used to remotely control compromised devices. In some of the cases investigated, the attackers also stole users’ identities and were even able to open new financial accounts in their names—and it’s suspected that said accounts are being used for money laundering.
Table of Contents
IPTV streaming apps as bait
In its report, ThreatFabric addresses a current trend of hiding malware and other malicious software behind IPTV apps. Over the past 8 months, hackers have increasingly used such streaming apps as bait.
Note that IPTV offerings come in both legal and illegal flavors. The legal ones can be found in official stores such as the Google Play Store, while the illegal ones are mainly offered via third-party sites and may violate copyright laws. In the case of Massiv malware, the offered apps are useless—they can’t be used for either legal or illegal streaming.
To ensure that the app remains active long enough to download malware in the background, the attackers use copies of genuine IPTV websites to distract users. Most of the cases investigated originate in Europe, with users in Portugal being the main target of Massiv… so far.
How to protect yourself
Only download verified apps from reputable providers that are available in official app stores such as the Google Play Store. Activate Google Play Protect. Never grant unnecessary permissions to newly installed apps. Install a reputable antivirus app for additional protection.
Further reading: This Android security app is actually malware