New ‘Snowblind’ malware steals data from Android devices

(MENAFN) The rise of mobile banking has brought unparalleled convenience, allowing users to manage their finances right from their phones. But that convenience has also introduced serious security concerns, particularly with the threat of malware designed to steal users’ banking credentials.

In this context, a new piece of malware known as Snowblind has emerged. Snowblind is particularly insidious because it can bypass biometrics and other security measures on mobile devices to steal data from various applications. It is currently targeting users in Asia and Africa, focusing on applications that handle sensitive user information.

Alarmingly, Android’s built-in security features inadvertently aid Snowblind by allowing it to bypass checks designed to prevent malicious apps from infecting devices. This capability allows Snowblind to infiltrate apps before they’ve been thoroughly vetted, quickly bypassing device security protocols to carry out its malicious actions.

Snowblind manipulates the app’s checking and processing process, making the device believe it’s malware-free. This deception means that users likely won’t notice any significant changes in performance or signs of a breach, making the malware particularly stealthy.

The most disturbing aspect of Snowblind is its ability to evade antivirus scans and bypass security checks. Its primary goal is to steal credentials from infected devices, including login details and bank account numbers. Additionally, it can hijack user sessions in banking chat programs and steal email and communication data with banks, posing a serious threat to users’ financial security.

MENAFN03072024000045015839ID1108401771