LiteCleaner M () with 1,000+ downloads.X-File Manager () with 10,000+ downloads.So, here below we have mentioned the four strategies primarily used by this malware:-īelow are the dropper applications that have been removed from the Play Store now:. In order to steal banking-related information from an Android device, SharkBot utilizes four main strategies.

When users attempt to open legitimate banking applications, this malware can also serve as a fake authentication or login page through which it steals users’ credentials. In this method, the actor-controlled account is swapped with the payee account via an intercepted transaction triggered by a banking app. This trojan is primarily designed to facilitate the transfer of money via a technique called ATS from compromised devices which is a primary goal of the Trojan.

There is a significant number of users who have downloaded malicious apps from the following countries in the majority:. In these applications, the user must grant permission to the application for it to install external packages (REQUEST_INSTALL_PACKAGES), which is why the applications disguise themselves as file managers. However, their actions are completely dependent on where the user is located. Upon installation of these malicious apps from Google Play, for the SharkBot bankers, these applications act as malicious droppers.

File manager android