Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

<ul><li>A new malware dubbed xHelper has already infected 45,000 devices and might be making its way to Jio users. </li><li>The trojan malware looks to be targeting users in India, the US and Russia. </li><li>xHelper doesn’t show up among listed apps or the launcher, and even if you install it — it will make its way back onto your device. </li></ul>A new Android-based malware has been making the rounds over the past six months and it’s targeting users in India, the US and Russia. On some phones, it’s even disguised as ‘<a href="https://www.businessinsider.in/business/corporates/news/reliance-jio-plans-made-more-money-but-added-fewer-subscribers/articleshow/71651933.cms">Jio</a>’. <a href="https://www.symantec.com/blogs/threat-intelligence/xhelper-android-malware">Sysmatec</a> suspects this because the malware is planning to target Jio users sometime in the future — that’s a pool of nearly 500 million subscribers. The trojan dubbed xHelper has already infected 45,000 devices. The <a href="https://www.businessinsider.in/malware-affecting-jio-apps-whatsapp-flipkart-and-hotstar-primarily-targeted-indian-users-through-alibabas-app-store/articleshow/70168751.cms">malware</a> hides in the background, doesn’t show up on the launcher, and even if you uninstall it — it will just reinstall itself and go back into hiding. The persistent piece of malware is capable of downloading unnecessary apps onto your phone cluttering memory and displaying ads, according to Sysmatec’s analysis. Malware that can’t be seen and can’t be removed The <keyword id="8272441" type="UNKNOWN" weightage="20" keywordseo="xhelper-malware">xHelper malware</keyword> is structured in such a way that it doesn’t have a regular user interface. Instead of a whole application, it disguises itself as an application component. This makes it possible for it to do two things. One, the phone doesn’t list itself as an application, so there’s nothing to uninstall. Two, there’s no way to launch it manually and open it up. The malware’s launch will only be instigated by external events — this includes acts like putting your phone on charging, or rebooting the device. Once it’s up and running, the malware runs as a foreground service. So, even when you clear cache as memory runs low — there’s a minimal chance of xHelper being shut down. Even if it’s somehow stopped, it will restart on its own. A ray of hope Of all the samples that Sysmatec analysed, none were from the <a href="https://www.businessinsider.in/how-to-set-up-google-play-store-to-accept-upi-payments/articleshow/70944135.cms">Google Play Store</a>. The cyber security company believes that there’s a high possibility that xHelper can only make its way onto a phone with something is downloaded from unknown sources. Sysmatec also observed that the malware is more prevalent on phones from certain brands, but did not disclose which specific smartphones are vulnerable. xHelper is among <a href="https://blog.malwarebytes.com/android/2019/08/mobile-menace-monday-android-trojan-raises-xhelper/">Malwarebytes</a>’ ten most detected list. It was added to their list in May 2019, and has since removed the infection from nearly 33,000 devices — and that number continues to rise. Nobody the malware’s origins or where it’s coming from — just that it’s a growing threat that needs to be averted. See also: <a href="https://www.businessinsider.in/tcs-hacked-and-data-leaked-to-chinas-operation-cloud-hopper/articleshow/69969506.cms">TCS was hacked for its clients by China’s cyber spy campaign: Report</a> <a href="https://www.businessinsider.in/malware-affecting-jio-apps-whatsapp-flipkart-and-hotstar-primarily-targeted-indian-users-through-alibabas-app-store/articleshow/70168751.cms">Malware affecting Jio Apps, WhatsApp, Flipkart and Hotstar ‘primarily targeted’ Indian users through Alibaba’s app store</a> <a href="https://www.businessinsider.in/tech/apps/news/heres-why-facebook-is-suing-the-nso-group-over-the-whatsapp-hack/articleshow/71814518.cms">Here’s why Facebook is suing the NSO Group over the WhatsApp hack</a>

New malware on the rampage might target Jio users — and uninstalling it won’t help

Cybersecurity firm <keyword id="412137" type="PERSON" weightage="20" keywordseo="Kaspersky">Kaspersky</keyword> has detected a new version of the <keyword id="8794922" type="UNKNOWN" weightage="20" keywordseo="Ginp-banking-trojan">Ginp banking Trojan</keyword>, and it is more powerful than it was before. The <keyword id="54201" type="PERSON" weightage="20" keywordseo="Malware">malware</keyword> was first detected in October last year and now, a new version has been spotted. What is a banking trojan? A banking trojan is a program that tries to obtain confidential information about users and clients using banking and payment systems. The trojan often intercept OTPs from banks to make a payment without the victim noticing. What is Ginp? Ginp is a banking trojan and when it was first spotted, it used to send the victim’s contacts to its creators, stole card data and intercepted text messages. Now, it has started sending users messages and push notifications to get the user to open banking apps. The notifications are designed in a way that the user expects to see a form for entering card details. It then overlays the app with a phishing window to steal user data. For this, it uses the phone’s accessibility functions that allows it to see the screen and tap buttons or links. As per the <a href="https://www.kaspersky.com/blog/ginp-mobile-banking-trojan/32478/">report</a>, in one such instance, a user was sent a notification from the Play Store. The notification said – “We are missing your credit or debit card details. Please use the Play Store app to add them securely.” When the user clicked on the notification, a form to enter the card details was shown to him. However, this form was not sent by Google Play and any information entered here would directly go to the malware creators. Similarly, fake SMSes from banks are also being sent to users, warning them that suspicious activity has been detected on their accounts. The trojan is able to create fake SMS with any text from any sender. How to protect yourself from banking trojans? <ul><li>Do not click on links in text messages if the message seems suspicious to you. </li><li>Download apps only from the Play Store and do not install apps from unknown sources. </li><li>Do not give accessibility permission to any app that does not require it. </li><li>Be careful while giving apps the permission to access SMS. </li><li>Do not click on suspicious push notifications. </li></ul>See also: <a href="https://www.businessinsider.in/tech/news/new-android-flaw-bluefrag-exploits-your-phones-bluetooth-to-send-malware/articleshow/74060573.cms">New Android flaw Bluefrag exploits your phone's Bluetooth to send malware</a> <a href="https://www.businessinsider.in/scammers-whatsapp-stealing-money-how-to-protect/articleshow/72976604.cms">Scammers are now using WhatsApp to steal money - here’s how you can protect yourself</a> <a href="https://www.businessinsider.in/tech/mobile/news/new-malware-on-the-rampage-might-target-jio-users-next/articleshow/71819198.cms">New malware on the rampage might target Jio users — and uninstalling it won’t help</a>

A malware is sending fake SMS to steal your banking details – Here’s how to protect yourself

<ul><li>Jio, Airtel, Cipla, MRF Tires, Sun Pharmaceuticals and other commercial companies have been tagged as targets by <keyword id="149865" type="PERSON" weightage="20" keywordseo="Chinese-hackers">Chinese hackers</keyword>. </li><li>Cybersecurity firm CYFIRMA has determined that two Chinese hacker groups — Ghost Panda and Stone Panda are looking to damage the companies’ reputation and extract trade secrets.</li><li>The motivation behind the attacks is to “teach India a lesson”.</li></ul>There’s a flurry of activity on the dark web and hackers’ forums as a reaction to the ongoing India-China border dispute in Galwan Valley. The two main hacking groups behind the rhetoric are China-based Gothic Panda and Stone Panda. Cybersecurity firm CYFIRMA Research reports that notable organisations like Jio, Airtel, Cipla and others are on the radar of Chinese hackers to “teach India a lesson”. Other comments translated from Mandarin included “this is one nation who doesn’t listen to us”. <div type="image" title="hack_edited" msid="76528295" hostid="261" caption="&amp;lt;p&amp;gt;Screen from Chinese hackers community forum&amp;lt;/p&amp;gt;"></div> As per their observations, CYFIRMA has shared three lists — commercial organisations, media companies, and government websites — that are potential targets as per the conversations they observed between the Chinese hacking community. Commerical organisations on Chinese hackers target list: <ol><li>Jio</li><li>MRF Tires</li><li>Sun Pharmaceuticals</li><li>Airtel</li><li>Cipla</li><li>Intex Technologies</li><li>Micromax</li><li>BSNL</li><li>Apollo Tires</li><li>L&amp;T</li></ol>According to CYFIRMA, the objective of hacking commercial organisations listed above is to cause reputation damage and extract any sensitive information that could hamper their operations — including trade secrets. Government sites on Chinese hackers target list: <ol><li>Ministry of Foreign Affairs</li><li>Ministry of Defence</li><li>Ministry of Information and Broadcasting</li></ol>The motivation for hacking government sites is to ‘name and shame’ them as per CYFIRMA’s report. The same applies to media houses on their target list. Media houses on Chinese hackers target list: <ol><li>Times of India</li><li>Republic TV</li><li>NDTV</li><li>Hindustan Times</li><li>X-TV</li><li>Aaj Tak</li><li>Dainik Jagran</li></ol>Meet the hackers behind the threat to Indian organisations Gothic Panda — also known at APT3, UPS and TG-011 — has been <a href="https://www.recordedfuture.com/chinese-mss-behind-apt3/">directly attributed</a> to the Chinese Ministry of State Security in the past. It has been behind campaigns like Operation Clandestine Fox, Double Tap and Clandestine Wolf in the past. Gothic Panda’s repertoire of victims include companies in the defence, telecommunications, transportiation, and advanced technology sectors. They have also been known to hack into government departments and bureaus in Hong Kong, the US, and several other countries. Stone Panda — also known APT10, Red Apollo, CVNX, HOGFISH and most popularly, menuPass — been known to originate in China and been active since 2009. In 2017, Palo Alto detected that the hacker group was targetting Japanese Academics and organisations with malware. In another investigation, FireEye found that Stone Panda was using a Remote Accessibility Trojan (RAT) — which gives the hackers to control your device from anywhere — to run reconnaissance, extract intelligence, and plant malware. SEE ALSO: <a href="https://www.businessinsider.in/tech/the-10-most-infamous-hackers-of-all-time/slidelist/46883316.cms">The 10 most infamous hackers of all time</a> <a href="https://www.businessinsider.in/tech/news/chinese-hackers-crack-through-indias-industry-department-website-with-mediation/articleshow/76510233.cms">Chinese hackers crack through India's Industry Department website with "mediation"</a> <a href="https://www.businessinsider.in/tech/news/sbi-warns-2-million-users-may-be-at-risk-of-phishing-attacks-in-delhi-mumbai-and-other-major-cities/articleshow/76505433.cms">SBI warns 2 million users may be at risk of phishing attacks in Delhi, Mumbai and other major cities</a>

Top 20 Indian organisations under threat of attack from Chinese hackers to “teach India a lesson” amid border tension

You Searched For "jio trojan malware" and got 3 results

New malware on the rampage might target Jio users — and uninstalling it won’t help

Prabhjote Gill

A malware is sending fake SMS to steal your banking details – Here’s how to protect yourself

Rounak Jain

Top 20 Indian organisations under threat of attack from Chinese hackers to “teach India a lesson” amid border tension

Prabhjote Gill

Popular Keywords

Buying Guides