Summary

A new Android Trojan malware dubbed “FlyTrap” was found operating March-August 2021. It is part of several Android apps posing as apps for either Netflix/Google AdWords coupon codes or voting on your favorite soccer player. Once installed, FlyTrap waits for you to sign into Facebook. It then funnels your account information (including credentials, user account details, and location info) to cybercriminals, and hijacks your account to message your friends with links to install the app on their own devices. Zimperium notified Google of the malware. Because of this, GooglePlay has removed apps they found included FlyTrap. Still, the malware may be circulating on third-party app stores.

Key Take Aways

• Not every hack involves poor grammar and cheesy graphics. High quality graphics and official looking screens increasingly disguise nasty scams.
• Beware any app from an unfamiliar developer—particularly if it involves logging into our social media or other accounts.
• Even if your credentials get stolen, multi factor authentication (MFA) limits access to those with another factor that identifies you. While the criminals behind FlyTrap may make use of a session when the victim is signed in, they cannot log in another time. MFA doesn’t make it impossible for a hacker to leverage your accounts, but it does make it much harder. As a result, fewer cyber criminals see you as worth the time.

Want to know more?

Get more details from Zimperium’s original post on their site.