See How Snowblind Malware Steals Banking Data

Snowblind specifically targets apps that handle sensitive user information like banking credentials. This makes it particularly dangerous for anyone who uses online banking on their Android device.

This malware leverages a security feature called "seccomp" to manipulate its way around standard security checks within apps. This allows it to operate undetected for a longer period. The malware injects malicious code to monitor your screen and potentially capture login credentials or interrupt banking sessions. This could allow attackers to steal your money or take control of your accounts.

Snowblind can potentially bypass two-factor authentication (2FA) and other security measures, making it even easier for attackers to gain unauthorized access. The malware operates quietly in the background, so you might not even realize it's on your device. This can give it more time to steal your data before you detect it.

This malware now targets Android devices to steal banking information. Discovered by cybersecurity firm Promon, this malware can capture your banking login details and perform unauthorized transactions. Typically, users get infected by downloading a malicious app that appears to be legitimate.

People usually get this virus by downloading a malicious app that looks legitimate. The malware repackages an app to avoid detection and misuses accessibility features to steal sensitive information and control the app remotely, said Vidar Krey, VP of engineering at Promon. "We believe these types of apps have likely spread outside of the official app stores. This has almost certainly been achieved via social engineering attacks, a still very prevalent and widely reported method of duping less tech-savvy users," Mr. Krey told PCMag.

Unlike other Android malware, Snowblind bypasses Android's built-in security by exploiting a feature called "seccomp" in the Linux kernel, which is supposed to check for tampering. This sophisticated technique allows Snowblind to evade detection and operate stealthily on the infected device. 

Ms. S Mohini Ratna - Editor VARINDIA