Malicious apps target ANZ and CommBank customers

Fake banking apps that appear to be from ANZ and CommBank have been placed on the Google Play store and downloaded by more than a thousand unsuspecting customers.

The apps steal credit card and log-in details.

Google has removed the apps but many customers may be unaware their cards are compromised.

 IT security company ESET said the apps were installed more than 1000 times before it alerted Google two weeks ago, according to Fairfax Media.

The fake apps appear to have been circulating since May. ANZ confirmed a customer alerted it about a fake app in June and Commonwealth-owned Auckland Savings Bank in New Zealand said customers had contacted it about a fake app in May.

A Google spokeswoman told Fairfax: “We remove applications that violate our policies, such as apps that are illegal or that promote hate speech. We don’t comment on individual applications; you can check out our policies for more information.”

CommBank said: “Once a suspicious app is identified, we work with the app store to ensure the app is quickly removed or disabled.”

Nick FitzGerald, senior research fellow at ESET, said it was rare for fake banking apps to pass the automated Google Play tests and make it into the store.

“This is a big concern for anyone who may have handed over personal information. The loss of personally identifiable information can result in financial fraud that may affect you for the rest of your life very negatively,” he said.

Concerned customers should also check their accounts for suspicious activity and contact their bank if they are worried.

Read the full Fairfax article here.

 

 

6 comments

If you use your phone just to talk to people, as I do (and use your computer to do tasks like internet banking) then you won't experience this problem.

Hopefully, if you use the App/s as advertised on your bank's legitimate website you'll be safe or at least covered if things go awry. 

Unfortunately, the 'unscrupulous' make Apps to sucker in folks for all well-known brands apparently ... best to stick to trusted original sources if you can IMO.

I get 'sucker' emails all the time purporting to be from famous brands, when I hover over the links ... nothing to do with the originals websites or apps. I delete them of course. A scammer's work is never done in the digital world sadly.

plead guilty to ignorance by not having been to google play store

[url=https://rrbalpresult2018.in/rrb-chennai-alp-result/]RRB Chennai ALP Result [/url]

I don't  understand why people download these intrusive apps wnich give Google access to your data, location photos and contacts when it's  so simple to add an icon to your homescreen and get much the same results.

I won't use my phone for anything other than calling or texting someone, so I'll never be left vulnerable to these 'wronguns'.

6 comments



To make a comment, please register or login

Preview your comment