Scary Android bug can empty your bank account in minutes - alert issued to millions

Anyone with an Android phone in their pocket would be wise to stay alert and be careful before loading any unofficial apps onto their devices. That's the latest alert from security experts at Zimperium who say they have spotted the resurgence of the "FakeCall" bug which is fully capable of hijacking phone calls in a bid to steal data and banking credentials.

This attack was first discovered by the team at Kapersky all the way back in 2022 with it getting more advanced in 2023.

READ MORE:

Now FakeCall is back and more dangerous than ever with Zimperium confirming that it can take over Android's call handler setting and manipulate both incoming and outgoing calls.

That means those targeted could think they are calling or being called by their bank but really they have been targeted by scammers instead.

Even if the correct number is being called, the bug can redirect the victim to fake call centres where money can then be stolen and bank accounts raided.

"When the compromised individual attempts to contact their financial institution, the malware redirects the call to a fraudulent number controlled by the attacker," Zimperium explains.

"The malicious app will deceive the user, displaying a convincing fake UI that appears to be the legitimate Android's call interface showing the real bank's phone number."

"The victim will be unaware of the manipulation, as the malware's fake UI will mimic the actual banking experience, allowing the attacker to extract sensitive information or gain unauthorized access to the victim's financial accounts."

READ MORE:

It's a worrying attack that should not be ignored. Luckily, there is a way to stay safe with it thought most of the "FakeCall" malware infections are taking place when users install apps from unofficial stores or via the web.

As long as you stick to Google's Play Store you should be safe. Before installing anything onto your phone it's always a good idea to check the permissions you are granting and, if possible, take time to read reviews and look at who has developed the application.

If you don't want your money stolen, stay alert and be careful which apps you install.