Don't Wake Up to a TrickMo Attack

TrickMo, the Android banking trojan is back with a vengeance. The malware has a history of targeting Android phones to steal banking info and money. And now, TrickMo’s latest version is stealing a lot more, and possibly doing it while you’re sleeping. Since no one wants to wake up to a TrickMo attack, it’s time to grab a cup of coffee, sit in your favorite chair, and learn more about this tricky trojan TrickMo.

2

New features of this TrickMo trojan help steal something and get access to your phone’s system. One of the most troublesome traits of this latest version uses a fake lock overlay screen that steals your PIN or unlock pattern, giving hackers access to your device.

Attackers can intercept OTPs (one-time passwords), hijack screen recordings, steal data, and ultimately get remote access to your device. TrickMo also exploits Accessibility Service permissions giving hackers control of other system permissions and can automatically tap on prompts at will when they show up on your phone. And yes, many of these new tricks can be done while you and your device are sleeping.

Not to forget, TrickMo is a banking trojan that relies on bogus login pages sent through email phishing. The pages look legitimate and are designed to steal your banking credentials. Once done, hackers are free to make unauthorized, fraudulent transactions to your account—also while you’re counting sheep.

• Watch for phishing attempts to avoid being TrickMo’ed.
• Unexpected links or attachments
• Links or attachments from unknown senders
• Generic greetings
• Blurred graphics and images
• Mistakes with spelling, grammar, and punctuation
• Threats of something bad happening if you don’t act fast

This updated version of TrickMo is being seen worldwide. Now that you have a heads up, stay vigilant about the emails you act on and where you enter your banking credentials. Remember, it’s your finances at risk, so extra caution is well worth the effort.