The Android Trojan Svpeng now capable of mobile phishingSince we published our first blog post about the mobile Trojan Trojan-SMS.AndroidOS.Svpeng, the cybercriminals have improved its functionalities. Now Svpeng is capable of phishing as well, trying to harvest the financial data of users.
When a user launches the banking application of one of Russia’s largest banks, the Trojan substitutes the opened window with a phishing window, designed to steal the victim’s login and password for the online banking system:
The data the user enters is sent to the cybercriminals.
Source:
The Android Trojan Svpeng now capable of mobile phishing
