New Android malware steals money from bank account, disables system functions: Here's how to stay safe

A new Android malware is in town that can steal money from your bank accounts, disable system functions, and spread to other devices via SMS sent by the bad actors. A Cybersecurity firm shared a detailed report about this new Android malware, which is called BingoMod. The malware was first discovered back in May 2024, and it’s still present. In this article, we will tell you what’s the new malware that you should be aware of and how you can keep your devices safe.

Cybersecurity firm Cleafy has warned people about a new malware that’s infecting Android devices. The malware called BingoMod utilizes fake text messages to trick people into downloading the malware. However, the fake message may not look like they are from any unofficial sender. BingoMod takes the guise of legitimate antivirus apps.

It has been spotted with several names such as Chrome Update, WebInfo, Sicurezza Web, InfoWeb, and others. It has also been disguised as AVG Antivirus, leaving users with no doubt. The SMS that’s sent contains a link that users are required to click to install the antivirus tool. After users install it, the app instructs users to activate Accessibility Services to enable security protection.

Around this time, it’s indirectly asking users for permission to infect the device. Once users permit and activate the required prompt that the tool suggests, the malware then gets into action of discreetly collecting data. It steals login credentials, by taking screenshots.

The bad actions behind it can control your entire smartphone if full access is provided. The tool may also read your SMS and possibly send one to others. That’s how bad actors spread it to other Android devices.

Here’s how to stay safe

So how does one stay safe and not get infected by the malware? Well, it’s scary to have such malware out in the wild, however, what users can do for now that may guarantee their device’s protection is to not install or click on any suspicious link. Remember, even if the link or the prompt is from a reputed source, still try to install apps or other similar tools from official sites and not directly via links from messages.

For instance: Install apps from the Google Play Store on Android. Play Store has Play Protect, which may help to weed out unnecessary apps or functions, ensuring that you install only verified apps. But again, nothing on the Internet could be safe so it’s always advisable to be sane when installing or using specific apps and services like antivirus or safety tools.