Every so often a new and more dangerous malware appears on Android. Today’s turn is for the Trojan dubbed BlackRock, which is responsible for extracting passwords and data from bank cards. Something that some people are not very aware of is the unimaginable amount of Malicious Programs that can be created very quickly and that is why we see this new Android Malware.<\/p>\n\n\n\n
This new malware emerged in May of this year, and has been detected thanks to the good work done by the mobile security company ThreatFabric. These researchers, after hard work, have discovered that the source code of the BlackRock malware is based on another malware strain also known as Xerses. What its developers did is improve it with additional features. In this sense, they focused on promoting the theft of passwords for the apps they used, and also on obtaining the credit card information of those users.<\/p>\n\n\n\n
This one has an important peculiarity that differentiates it from the others, and that is that it points to more applications than its predecessors. In this case, it indicates that it tries to steal data from 337 Android apps, which indicates its great potential and the obvious risk that we could have if our smartphone becomes infected. BlackRock uses the accessibility feature to reach other Android permissions and then occupies an Android DPC (device policy controller, also known as a work profile) to grant itself administrator access to the device.<\/p>\n\n\n\n
\u25b8Launch specific applications<\/em><\/strong><\/p>\n\n\n\n \u25b8Perform SMS floods<\/em><\/strong><\/p>\n\n\n\n \u25b8Spam contacts with predefined SMS<\/em><\/strong><\/p>\n\n\n\n \u25b8Sabotage mobile antivirus apps and more<\/em><\/strong><\/p>\n\n\n\n \u25b8Intercept SMS messages<\/em><\/strong><\/p>\n\n\n\n \u25b8Show custom push notifications<\/em><\/strong><\/p>\n\n\n\n \u25b8Registration Keystrokes (Keylogger)<\/em><\/strong><\/p>\n\n\n\n Once the malware is installed on the device by a malicious application contaminated with the BlackRock Trojan, it will ask the user to grant it the Accessibility permission of the phone. Thanks to the use of this permission that the victim has granted, he will use it to automate tasks and even perform taps on behalf of the user. Right now, BlackRock malware is being distributed under the guise of fake Google update packages, offered on third-party sites. Fortunately, this malicious software has not been detected in the Google Play Store.<\/p>\n","protected":false},"excerpt":{"rendered":" Every so often a new and more dangerous malware appears on Android. Today’s turn is for the Trojan dubbed BlackRock, which is responsible for extracting passwords and data from bank cards. Something that some people are not very aware of is the unimaginable amount of Malicious Programs that can be created very quickly and that […]<\/p>\n","protected":false},"author":1,"featured_media":1082,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[36,35,106],"class_list":["post-1081","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity","tag-malware","tag-trojan"],"yoast_head":"\n