Accessibility links

Facebook   X   LinkedIn   Email

Don't Wake Up to a TrickMo Attack

By: Jim Stickley and Tina Davis
February 9, 2025

TrickMo, the Android banking trojan is back with a vengeance. The malware has a history of targeting Android phones to steal banking info and money. And now, TrickMo’s latest version is stealing a lot more, and possibly doing it while you’re sleeping. Since no one wants to wake up to a TrickMo attack, it’s time to grab a cup of coffee, sit in your favorite chair, and learn more about this tricky trojan TrickMo.

40 New TrickMo Upgrades

New features of this TrickMo trojan help steal something and get access to your phone’s system. One of the most troublesome traits of this latest version uses a fake lock overlay screen that steals your PIN or unlock pattern, giving hackers access to your device.

Attackers can intercept OTPs (one-time passwords), hijack screen recordings, steal data, and ultimately get remote access to your device. TrickMo also exploits Accessibility Service permissions giving hackers control of other system permissions and can automatically tap on prompts at will when they show up on your phone. And yes, many of these new tricks can be done while you and your device are sleeping.

Not to forget, TrickMo is a banking trojan that relies on bogus login pages sent through email phishing. The pages look legitimate and are designed to steal your banking credentials. Once done, hackers are free to make unauthorized, fraudulent transactions to your account—also while you’re counting sheep.

  • Watch for phishing attempts to avoid being TrickMo’ed.
  • Unexpected links or attachments
  • Links or attachments from unknown senders
  • Generic greetings
  • Blurred graphics and images
  • Mistakes with spelling, grammar, and punctuation
  • Threats of something bad happening if you don’t act fast

This updated version of TrickMo is being seen worldwide. Now that you have a heads up, stay vigilant about the emails you act on and where you enter your banking credentials. Remember, it’s your finances at risk, so extra caution is well worth the effort.



Mobile Banking Apps Continue To Be A Hi Value Target For Cybercriminals

Mobile Security

Mobile Banking Apps Continue To Be A Hi Value Target For Cybercriminals

It’s that time of year when organizations that track cybersecurity stats and other information start to release their results. And to no one’s surprise, mobile banking has been under attack in 2021. The Nokia 2021 Threat Intelligence Report found the cybercriminals’ desire to steal your banking credentials has ramped up throughout the year by logging your keystrokes, taking screenshots, trying to snag those two-factor authentication (2FA) codes, and using overlays. There’s no lack of trying to get your confidential information…and your money. READ FULL STORY
Storing Passwords In Your Browser…It’s Convenient, BUT Very Risky Too

Your Security

Storing Passwords In Your Browser…It’s Convenient, BUT Very Risky Too

Most of us know that password fatigue can lead to security mishaps and that creating a safe and secure entrance into our personal or work accounts can be a real challenge. Fortunately, security experts also know that safe password use has long been a problem, one that can lead to epic malware infections like ransomware, banking trojans, and more. Popular browsers like Chrome, Firefox, Safari, and Opera offer the option to store passwords for you, but hackers using the malware “RedLine Stealer” can hijack those stored passwords in a heartbeat. READ FULL STORY
Financial Fraud Evolves As Fraudsters Ramp Up Their Attacks

Your Security

Financial Fraud Evolves As Fraudsters Ramp Up Their Attacks

Cybercriminals are stepping-up to the surge in opportunities for financial fraud. The new products and services that financial institutions (FIs) offer to compete for customers, gives fraudsters new avenues to exploit. Expanding banking options give FIs the ability to battle for customers with their marketing approach. But for many FIs and their clients, bad actors are also responding to these banking options. For all the wrong reasons, they too appreciate additional channels for banking, but only as an opportunity to expand their fraudulent attacks. READ FULL STORY
Users Get Tricked Into Falsely Updating Google Services

Mobile Security

Users Get Tricked Into Falsely Updating Google Services

The TrickMo Android banking trojan has re-emerged in a new form, disguised as a fake Google Chrome app for Android. Once installed, this malicious app prompts users to update Google Play Services, tricking them into downloading TrickMo under the guise of "Google Services." By doing so, it gains access to critical permissions, including those for the device's accessibility settings, which it then exploits to perform various malicious activities. READ FULL STORY
Accounts Drained By Zelle Smishing Scam

Mobile Security

Accounts Drained By Zelle Smishing Scam

From time to time, scammers come up with a new tactic using new technology, new events, or whatever they can to continue tricking us into giving up our personal or confidential information. Over the past few years and with the increasing use of texting and SMS messaging, a newer one in the bag of tricks has been coined as “smishing.” Because it’s text, it often catches people off guard and causes them to react quickly, which is exactly what you shouldn’t do. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.