Lowcountry Android users, a new virus could be stealing sensitive information from you
If you have an Android smartphone, you may want to be careful. A Trojan virus posing as an update is targeting Android users, and it can grab login details from over 40 social media, retail and banking apps, WJCL reports
The developers of the virus, called Marcher, link to mobile games and adult content located on third party websites. Once an infected app has been downloaded users will see a popup asking them to update their Flash Player.
If they click the link, their phone will be infected. The phone’s security is then disabled and information from the phone is sent to the developers whenever an app is used, WJCL reports.
Fake login pages for apps like TD Bank, Google, Yahoo, Chase Bank, Paypal, Citibank, Walmart, Amazon, Western Union, Facebook and others can also be generated by the virus according to WJCL.
By avoiding apps from unknown sources, downloading antivirus software, and keeping phones updated, WJCL reports that people should be able to limit the likelihood of coming in contact with the virus.
Michael Olinger: 843-706-8107, @mikejolinger
Full list of infected apps
org.morgbigorg.nonem
com.google.android.gm
com.yahoo.mobile.client.android.mail
com.htc.android.mail
com.android.email
com.paypal.android.p2pmobile
com.chase.sig.android
com.suntrust.mobilebanking
com.wf.wellsfargomobile
com.citi.citimobile
com.konylabs.capitalone
com.infonow.bofa
com.morganstanley.clientmobile.prod
com.amazon.mShop.android.shopping
com.htsu.hsbcpersonalbanking
com.usaa.mobile.android.usaa
com.schwab.mobile
com.americanexpress.android.acctsvcs.us
com.pnc.ecommerce.mobile
com.regions.mobbanking
com.clairmail.fth
com.grppl.android.shell.BOS
com.tdbank
com.huntington.m
com.citizensbank.androidapp
com.usbank.mobilebanking
com.key.android
com.ally.MobileBanking
com.unionbank.ecommerce.mobile.android
com.mfoundry.mb.android.mb_BMOH071025661
com.bbt.cmol
com.sovereign.santander
com.mtb.mbanking.sc.retail.prod
com.fi9293.godough
com.circle.android
com.coinbase.android
com.walmart.android
com.bestbuy.android
com.gyft.android
com.commbank.netbank
org.westpac.bank
au.com.nab.mobile
org.stgeorge.bank
com.facebook.katana
com.moneybookers.skrillpayments
com.westernunion.android.mtapp
org.banksa.bank
com.ebay.mobile
This story was originally published June 25, 2017 at 7:03 PM with the headline "Lowcountry Android users, a new virus could be stealing sensitive information from you."