Beware of This Android Malware That Factory Resets Your Device After Stealing Money!

While Android makes way for customization and other nifty features, it also makes room for cyber attackers to gain access to people’s data or steal their money, thus, causing privacy concerns. Over the years, we have seen various malware such as Ghimob, Blackrock, and xHelper affect thousands of Android devices. Now, an evolved version of the malware program BRATA has been discovered that can factory reset your Android device after stealing your money using e-banking apps.

This is How BRATA Malware Steals Your Money!

A recent research report from a cyber security firm named Cleafy details the BRATA malware. According to the report, BRATA is primarily a banking trojan that can remotely access users’ Android devices and steal their money via banking apps. However, the latest version of the program also allows attackers to remotely factory reset an Android smartphone following malicious activities.

The malware works like any other trojan and uses fake login pages to harvest sensitive user data such as their banking credentials and then steal their money. As per Cleafy, attackers can deploy fake login pages onto a user’s device using BRATA. Following this, the program is able to get the user data from e-banking accounts and steal money without the user knowing about it.

Moreover, with its new factory reset functionality, attackers can remotely reset an Android device to remove any evidence of the malware on a user’s device. By the time a user discovers that they have been robbed, the attackers would be able to easily get away with their goods.

For those who don’t know, BRATA is short for Brazilian Remote Access Tool Android and originally showed up in Brazil a few years ago. However, over the years, it spread to other regions of the world. Last year, as per reports, some BRATA-based apps showed up on the Google Play Store before being removed by Google.

The researchers also wrote that earlier versions of BRATA were spotted in the US previously. The newer version, however, has been recently spotted, targeting banking institutions in the UK, Italy, and Poland.

While there isn’t a lot one can do, we’d recommend you download your apps from legitimate sources rather than sideloading them from sketchy websites. Furthermore, you should always read user reviews and get more information about an app before downloading it to your Android device to remain safe from such malware attacks.