New Android Malware Discovered That Can Steal Your Credentials, Credit Card Details

BlackRock was first spotted in the Android malware world in May, according to the analyst team at ThreatFabric.

Advertisement
By Jagmeet Singh | Updated: 17 July 2020 18:48 IST
Highlights
  • BlackRock targets apps such as Gmail, Netflix, and WhatsApp
  • The malware overlays a screen to steal user details silently
  • BlackRock initially pretends as a Google Update on Android devices
New Android Malware Discovered That Can Steal Your Credentials, Credit Card Details

BlackRock targets a total of 337 apps, of which several are non-financial ones

Photo Credit: ThreatFabric

A new Android malware has been discovered by a team of security researchers that is found to target a list of social, communication, and dating apps. The malware, called BlackRock, is a banking Trojan — derived from the code of the existing Xerxes malware that is a known strain of the LokiBot Android trojan. However, despite being a banking Trojan, the malicious code is said to target non-financial apps. It pretends to be a Google Update at first, though after receiving user permissions, it hides its icon from the app drawer and starts the action for bad actors.

BlackRock was first spotted in the Android world in May, according to the analyst team at the Netherlands-based threat intelligence firm ThreatFabric. It is capable of stealing user credentials as well as credit card details.

Although the capabilities of the BlackRock malware are similar to those of average Android banking Trojans, it targets a total of 337 apps, which is significantly higher than any of the already known malicious code.

“Those ‘new' targets are mostly not related to financial institutions and are overlayed in order to steal credit card details,” the team at ThreatFabric said in a blog post.

The malware is said to have the design to overlay attacks, send, spam, and steal SMS messages as well as lock the victim in the launcher activity. It can also act as a keylogger, which essentially could help a hacker to acquire financial information. Furthermore, the researchers have found that the malware is capable of deflecting usage of an antivirus software such as Avast, AVG, BitDefender, Eset, Trend Micro, Kaspersky, or McAfee.

Advertisement

How does the malware steal user information?
According to ThreatFabric, BlackRock collects user information by abusing the Accessibility Service of Android and overlaying a fake screen on top of a genuine app. One of the overlay screens used for malicious activities is a generic card grabber view that could help attackers gain credit card details of the victim. The malware can also bring a specific per-targeted app for credential phishing.

BlackRock acquires user data by using an overlay technique
Photo Credit: ThreatFabric

Advertisement

 

BlackRock asks users to grant access to the Accessibility Service feature after surfacing as a Google Update. Once granted, it hides its app icon from the app drawer and starts the malicious process in the background. It can also grant other permissions itself after getting the Accessibility Service access and can even use Android work profiles to control a compromised device.

Advertisement

Extensive target app list
“In the case of BlackRock, the features are not very innovative but the target list has a large international coverage and it contains quite a lot of new targets which haven't been seen being targeted before,” the researchers noted in the blog post.

The list of 226 targeted apps specifically for BlackRock's credential theft include Amazon, Google Play Services, Gmail, Microsoft Outlook, and Netflix, among others. Similarly, there are also 111 credit card theft target apps that include popular names such as Facebook, Instagram, Skype, Twitter, and WhatsApp.

“Although BlackRock poses a new Trojan with an exhaustive target list, looking at previous unsuccessful attempts of actors to revive LokiBot through new variants, we can't yet predict how long BlackRock will be active on the threat landscape,” the researchers said.

Google hasn't provided any clarity on how it would handle the scope of BlackRock. Having said that users are recommended to stay away from installing apps from any unknown source or grant permissions to an odd app.


In 2020, will WhatsApp get the killer feature that every Indian is waiting for? We discussed this on Orbital, our weekly technology podcast, which you can subscribe to via Apple Podcasts or RSS, download the episode, or just hit the play button below.

 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Advertisement

Related Stories

Popular Mobile Brands
  1. Poco F7 Launch Date, Price in India, Design and Key Features Leaked Online
  2. OnePlus Nord 5 Series, OnePlus Buds 4 to Launch in India on This Date
  3. Vivo Y400 Pro 5G India Launch Date Confirmed; Design Revealed
  4. Vivo X200 FE Global Launch Confirmed; Design Teased
  5. Oppo K13x 5G India Launch Date, Price Range and Key Features Revealed
  6. Realme Narzo 80 Lite 5G Launched in India With 6,000mAh Battery: See Price
  7. Oppo Reno 14 5G Series, Watch X2 Mini, Enco Buds 3, Pad SE to Launch Globally
  8. This Is When Axiom-4 Mission Carrying Shubhashu Shukla Will Be Launched
  9. Windows 11 Will Now Let You Change Settings With AI Agent
  10. Switch 2 Had the Biggest-Ever Launch Week for Video Game Hardware in the US
  1. The Witcher 4 Will Target 60 FPS on Consoles, but Series S Will Be 'Extremely Challenging' Says CD Projekt Red
  2. Oppo Reno 14 5G Series Global Launch Teased Alongside Watch X2 Mini, Enco Buds 3 and Pad SE
  3. Microsoft Begins Testing AI Agents in Windows 11, Brings Option to Share Recall Snapshots in Europe
  4. watchOS 26 to Bring Control Center Customisation Options with User-Defined Toggles
  5. Tecno Pova 7 5G Series India Launch Teased; Confirmed to Be Available on Flipkart
  6. Oppo K13 Turbo Pro Key Specifications Leaked; Could Be Equipped With Snapdragon 8s Gen 4 SoC
  7. Lenovo Legion Pro 7i (2025) With Intel Core Ultra 9 HX CPU, Up to Nvidia GeForce RTX 5090 GPU Launched
  8. Hisense U7Q Mini-LED TV With 144Hz Gaming Support, Built-in Subwoofer Launched in India
  9. OnePlus Nord 5, Nord CE 5, and Buds 4 India Launch Date Set for July 8; Key Features, Availability Revealed
  10. OpenAI Makes Canvas in ChatGPT Downloadable, Adds New Capabilities to Projects
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.