Hirudo Trojan Targets Banking Apps in Morocco, Indonesia, and Mexico
What happened
Cybersecurity researchers identified Hirudo, an Android banking trojan that replaces legitimate banking applications with maliciously modified versions to steal financial credentials. The malware primarily targets eight Indonesian banking applications, with potential credential targeting or expansion identified in Morocco and Mexico. Hirudo is distributed through fraudulent Google Play Store pages and social media advertisements.
From mondaq.com
Why it matters
The malware is designed to bypass security controls, allowing attackers to steal passwords, payment PINs, and SMS messages from victims. Its expansion into Morocco and Mexico increases the financial risk facing banking sectors in those regions.
From mondaq.com
Who's involved
- MoroccoSovereign state where the malware is expanding into the banking sector
- Bank of AfricaMultinational pan-African banking conglomerate potentially exposed to the threat
- Bank Al-MaghribCentral bank of Morocco that may need to increase oversight of the banking sector
Who could feel it
Possible knock-on effectsThese are possibilities Brind reasoned out, not predictions, and not advice. Most are not stated in any report.
- MoroccoSpeculative
The expansion of the malware into the Moroccan banking sector could increase financial risk and operational costs.
- Bank of AfricaSpeculative
Bank of Africa might face increased costs related to cybersecurity defenses and potential revenue loss from fraud.