Based on inputs from Interpol, the CBI has alerted the States/Union Territories/Central Agencies on a threat from a malicious software that uses a banking Trojan Cerberus which deploys its app to trick users into installing it on their smartphones.
This Trojan uses an update related to Coronavirus pandemic and primarily focuses on stealing financial data such as credit card numbers and two-factor authentication details.
“Based on inputs received from INTERPOL, CBI has issued an alert relating to a banking Trojan known as Cerberus. This malicious software takes advantage of Covid-19 Pandemic to impersonate and send SMS using the lure of Covid-19 related content to download the embedded malicious link, which deploys its malicious app usually spread via phishing campaigns to trick users into installing it on their smartphones,” said the CBI which is the nodal agency for Interpol in India.
The dubious app can use overlay attacks to trick victims into providing personal information and can capture two-factor authentication details, the agency said.
Last week, the CBI had issued an alert relating to drug trafficking in the garb of shipments for Covid-19 protective equipment. The alert was also based on inputs from the Interpol.
“Based on inputs received from INTERPOL, CBI has issued an alert relating to international drug trafficking activities taking advantage of this global pandemic scenario and of possible drug shipments concealed in cargo relating to Covid-19 protective equipments,” the CBI had said in a statement last week.
The Interpol has also warned that criminal organizations are using food delivery services to transport drugs and other illicit goods as countries are undergoing lock down during the global Covid-19 pandemic.