Mobile phone users warned to ‘stop before you tap’ on apps

Anti-fraud, cybersecurity and financial organisations are highlighting a “surge” in Android malware on mobile phones.

They want people to be on the lookout for unexpected updates or “strange” app requests and are urging users to “stop before you tap”.

Malicious apps may mimic legitimate tools to steal banking details.

The Cyber Defence Alliance (CDA), UK Finance, Cifas, and ThreatFabric have joined forces to highlight the problem.

How do you know if someone is scamming your phone?

In some cases, malicious apps may look like file managers, PDF readers, phone cleaners, or even browsers like Google Chrome, the organisations said.

Once installed, they can appear harmless but later activate harmful features through hidden updates.

Criminals may use techniques which overlay fake login screens on top of real banking apps to steal login credentials.

Deceptive “busy” or “waiting” screens may be displayed to mask fraudulent activity.

People may also be prevented from exiting the app or restarting their device.

They may find that excessive permissions such as “accessibility” access are requested.

People are being urged by the organisations to be vigilant particularly when being prompted to re-authenticate during a banking session.

This could also mean an unexpected prompt to install or update Chrome; or being asked to grant unusual permissions, particularly accessibility access.

International crime groups are at heart of mobile attacks, the organisations said, adding that users in general should be vigilant.

How to avoid scams

Han Sahin, CEO of ThreatFabric, said: “Just as we’ve learned to be cautious with links, we now need the same vigilance when installing apps. This is the logical next step in staying safe, and public awareness is crucial.”

Garry Lilburn, operations director at CDA, said: “This crime highlights the growing prevalence and sophistication of mobile malware.

“As we work to better understand and disrupt this evolving threat, it’s crucial that financial consumers stay vigilant, follow recommended security tips, and take a moment to verify what’s in front of them – before becoming the next victim of this highly targeted fraud.”

Recommended Reading:

Have to stay safe from mobile fraud

1. Only download apps from trusted sources.

2. Check app reviews and developer information before installing.

3. Keep your device’s operating system and apps up to date.

4. Report suspect apps or activity to your bank immediately.

5. Be wary of apps requesting unnecessary permissions.

The above suggestions have been made by the organisations to help mobile users stay safe.