Android malware combo takes out loans and relays victims' credit cards
A harmful Android app setup is being used to secretly take payment card details from phones and help criminals make purchases or take out loans in a victim’s name. The attack can also give criminals deep access to an infected phone, putting personal and financial information at risk.
Who is at risk
Android phone users are most at risk, especially people who install apps from links, messages, or unofficial app stores, or who use their phone for contactless payments or banking.
What to watch for
Watch for unexpected app installs, strange permission requests, your phone asking you to tap it against another device, unusual banking or card activity, or alerts about new loans or accounts.
What to do
Immediately remove suspicious apps, turn off contactless payment features you do not need, check bank and card statements, freeze or lock affected cards if anything looks wrong, and change important account passwords.