Learning Android Forensics - Second Edition

Banking malware

Banking malware is one of the most popular varieties on the Android platform. It can be distributed as fake banking applications to steal banking information typed by the users, or as a third-party application that will steal such info from a genuine one. Also, usually, banking Trojans can intercept banking transactions, and perform actions typical of spyware, such as sending, deleting, and intercepting SMS messages, and keylogging. Some pieces of banking Trojans have even more advanced capabilities. A good example is MysteryBot—this can also send spam from the affected device and has ransomware capabilities.