• Skip to main content
  • Skip to secondary menu
  • Skip to primary sidebar
  • Skip to footer
  • Our Services
  • Contact Us
  • Newsletter
  • Top Nav Social Icons

Mobile ID World

Mobile ID World

Identification Revolution

  • Mobile ID
    • What Is Mobile ID?
    • Identity Associations
    • Premier Partners
    • FAQ
  • News
  • Solutions
    • Behavioral
    • Facial Recognition
    • Fingerprint Biometrics
    • Iris Biometrics
    • Second Factor
    • Smart Cards
    • Smartphones
    • Vital
    • Voice
    • Wearable Tech
    • Other
  • Applications
    • Access Control
    • Cloud Technology
    • Commerce
    • Enterprise
    • Healthcare
    • Identification
    • Internet of Things
    • Law Enforcement
    • Strong Online Authentication
  • Exclusive
    • Interviews
    • Featured Articles
    • Podcasts
  • Companies
  • Events

Buguroo Warns About Threat of Android Banking Trojan in Brazil

January 2, 2020

Buguroo is calling attention to the threat of the BasBanke Trojan for Android devices in a new post on the company blog. Also known as Coybot, the BasBanke Trojan specifically targets Brazilian banking institutions, although it does have some similarities to the Pazera Trojan that goes after Windows devices in Latin America more broadly.

According to Buguroo, the BasBanke Trojan seems to spread through fake Facebook posts and WhatsApp messages. Once it infects an Android device, it will track the activity on that device and overlay a fake login page that is designed to mimic the actual login page of an app like Google Play, tricking the user into entering credentials that can be captured by the malware.

In many cases, the overlay will only appear when the user tries to open the app, which makes the user think the activity is legitimate and makes the gimmick even more effective. Coybot also uses Base64 encryption to make the malware harder to detect.

The Trojan first appeared in 2018, and has only appeared sporadically in the months since. However, it is not the only Trojan of its kind, and highlights the fact that consumers are often not aware that a device has been infected.

Buguroo notes that one-time SMS passwords sent via text message can be easily intercepted and are therefore unreliable as a security measure. The company presents behavioral biometrics as a potential solution to the problem, arguing that continuous authentication during a banking session can help stop cybercriminals that have managed to get their hands on someone’s account and login information.

In that regard, the post is merely Buguroo’s latest security primer. The company has already detailed some of the strengths and weaknesses of various forms of two-factor authentication, and discussed countermeasures that can be taken to prevent first and second party fraud.

Buguroo also received $11 million in Series A funding in November.  

Filed Under: Industry News Tagged With: Android security, BasBanke Trojan, behavioral biometrics, Biometric, biometrics, Buguroo, corporate blogs, Coybot, malware, mobile security

Related News & Articles

Okta Completes Acquisition of Auth0

Android 11 Comes to OPPO with ColorOS 11

A Part Of Our World: Samsung Expands Emoji Repertoire Including a Disney Touch

Primary Sidebar

Register For the Next Virtual Identity Summit

Register now!

Tweets

Sponsored Links

facetec logo

FaceTec’s patented, industry-leading 3D Face Authentication software anchors digital identity, creating a chain of trust from user onboarding to ongoing authentication on all modern smart devices and webcams. FaceTec’s 3D FaceMaps™ make trusted, remote identity verification finally possible. As the only technology backed by a persistent spoof bounty program and NIST/iBeta Certified Liveness Detection, FaceTec is the global standard for Liveness and 3D Face Matching with millions of users on six continents in financial services, border security, transportation, blockchain, e-voting, social networks, online dating and more. www.facetec.com

FACEPHI is a global leader in Facial Recognition technology and in Mobile Biometrics technologies. With a strong concentration in the financial sector, FacePhi’s product is rapidly becoming a service used by banks all over the world. Its implementation doesn’t just save money, it is also a way to attract clients and build loyalty, while increasing the security of transactions for both the customer and the business. To learn more about FacePhi, visit https://www.facephi.com/en/

Recent Posts

  • Thai Authorities Approve Mobile ID for Airport Boarding
  • New Yoti Solution Ties Biometrics to e-Signatures
  • Kenya’s New President Pushes for Digital ID By Year’s End
  • MDL, Digital ID Gain Momentum in State Efforts
  • Brazil-based Selfie Onboarding Startup Reports 250% Sales Jump, Global Expansion

Footer

  • About Us
  • Company Directory
  • Advertise With Us
  • Contact Us
  • Privacy Policy
  • Terms of Use
  • Archives
  • CCPA: Do not sell my personal info.

Follow Us

Copyright © 2023 MobileIDWorld