FakeCalls Mobile Malware
Summary
Cybersecurity researchers are warning users and business organizations alike about a mobile malware threat tracked as FakeCalls Android Trojan. Voice phishing, also known as vishing, is a type of social engineering scheme that aims to deceive victims into believing that they are communicating with a legitimate bank employee. This is achieved by creating a fake internet banking or payment system application that mimics a real financial institution. Once the victims trust is established, they are tricked into confirming their credit card details as part of the process for qualifying for the fake loan. In addition to its other capabilities, the FakeCalls malware can capture live audio and video streams from the infected devices camera and send them to the Command-and-Control (C&C) servers with the help of an open-source library.