"Vultur Banking Malware for Android Poses as McAfee Security App"

Security researchers have discovered a new version of the Android "Vultur" banking Trojan with more advanced remote control capabilities and a better evasion mechanism. ThreatFabric researchers first documented the malware in March 2021, and by late 2022, they had observed it being distributed via dropper apps on Google Play. At the end of 2023, the mobile security platform Zimperium listed Vultur as one of the year's top ten most active banking Trojans, with nine of its variants targeting 122 banking apps across 15 countries. According to Fox-IT, a new, more evasive version of Vultur spreads via a hybrid attack that uses SMS phishing (smishing) and phone calls. The attack tricks victims into installing a version of the malware masquerading as the McAfee Security app. This article continues to discuss findings regarding the new version of the Vultur banking Trojan.

Bleeping Computer reports "Vultur Banking Malware for Android Poses as McAfee Security App"

Submitted by grigby1

Submitted by Gregory Rigby on