Blog

New Android Malware Can Drain Your PayPal Account 

Dec 31, 2018 | Blog

Do you own an Android device?  Are you a PayPal user?  If you answered yes to both of those questions, you have something new to worry about.

A limited number of versions of an app called “Optimization Battery” contains a Trojan designed to steal money from PayPal accounts, including those that are protected by two-factor authentication.

The new threat was discovered by researchers at ESET.  An in-depth analysis of the code reveals it to be a well-engineered threat that should be considered extremely dangerous.

It works by abusing the “Accessibility” service to mimic screen taps.  In this way, the malware can initiate a new PayPal transfer, enter the information of an account controlled by the hacker as the recipient, and enter in the sum to be transferred. This all happens in the space of about five seconds, which doesn’t give the victim sufficient time to interrupt the transfer.

Even worse, it’s set to activate and initiate a transfer every time the victim logs into PayPal, so the victim has just enough time to see that funds are available, only to watch in horror as they are immediately bled out of the account, right before their eyes.

It all happens so quickly that many users first think it’s a glitch.  They may suffer two, three, or more attacks before they realize that something nefarious is afoot.

If there’s a silver lining to be found, it is the fact that the poisoned version of Optimization Battery is only available on third-party vendor websites.  It is not present on the Google Play Store.  The best defense then, is to simply limit your app downloads to the Google Play Store in order to minimize your risk.

The bottom line is, if you have an Android device, use PayPal, and have installed the Optimization Battery app, keep a close watch on your PayPal balances.  Someone may be robbing you blind.

 

FBI Program Tasked with Infrastructure Security Compromised

FBI Program Tasked with Infrastructure Security Compromised

The FBI program tasked with ensuring critical infrastructure security has been compromised by hackers, who now offer access to the program's data on the dark web. The breach was initially disclosed by Brian Krebs of Krebs on Security, who claims that the data was for...

Streamline Your Business with the Latest Smart Home Technology

Streamline Your Business with the Latest Smart Home Technology

Are you a business owner looking to get the most out of your Google smart home devices? If so, you're in luck! Google has enabled its Nest products and Android OS with the initial rollout of the Matter smart home standard. This means that businesses now have the...

Data Breach at Sequoia One Exposes Sensitive Customer Information

Data Breach at Sequoia One Exposes Sensitive Customer Information

What do you do when your most personal information has been compromised? This is likely the question that customers of Sequoia One asked themselves earlier this month as they were informed that the company had been hacked. Sequoia One specializes in the management of...

Cisco Reports Critical IP Phone Vulnerability

Cisco Reports Critical IP Phone Vulnerability

As a business owner, it's important to stay informed about potential vulnerabilities that could impact your organization. Recently, Cisco reported a critical vulnerability, tracked as CVE-2022-20968, affecting its IP Phone 7800 and 8800 Series. This new vulnerability...

Google Chrome Releases Two New Features

Google Chrome Releases Two New Features

Google Chrome is one of the more commonly used web browsers. Over the years, though, Chrome has gained a reputation for utilizing a large portion of a computer's memory. This can be a problem if you're running other resource-intensive tasks and don't want to slow...

Get a Free Consultation

 

Fill out the form below to receive a free consultation and learn how we can make your technology worry-free!

 

Contact Information

  • 39301 Badger Street, Suite 500
    Palm Desert, CA 9221
  • (760) 333-8523
  • info@icn.tech