Beware of fake Clubhouse app for Android: Fake app contains Trojans that steal login data and bypass two-factor authentication.
The hype surrounding the audio-based chat app Clubhouse, which is only available for iPhones and iPads, is immense. Criminals are currently trying to lure users into the malicious code trap with a supposed application for Android. The "BlackRock" Trojan is hidden behind the counterfeit. If the malicious program gets onto the device, it looks for 458 online services and then tries to steal the login data. The target list includes well-known finance and shopping apps, crypto exchanges, as well as social media and messaging platforms. These include well-known names such as Twitter, WhatsApp, Facebook, Amazon, Netflix, Outlook, eBay, Coinbase, Plus500, Cash App and BBVA. In the current case, SMS-based two-factor authentication (2FA) does not help either, as the malware can intercept text messages. ESET Mobile Security already protects its users from BlackRock.
Fake clubhouse website as a trap
“The website that advertises the supposed Clubhouse App for Android looks deceptively real. As soon as the user clicks on the button that is supposed to take him to the Google Play Store, the app is automatically downloaded and installed. Legitimate apps would always forward the user to Google Play first, ”explains Lukas Stefanko, malware researcher at ESET. “Even during installation, the alarm bells should ring with users. The app is not called 'Clubhouse', but 'Install'. The malware creator was apparently too lazy to properly camouflage the application. But it could also mean that we will see even more sophisticated copies in the future. "
Find out more on WeLiveSecurity at ESET.com
About ESET ESET is a European company with headquarters in Bratislava (Slovakia). ESET has been developing award-winning security software since 1987 that has already helped over 100 million users enjoy secure technology. The broad portfolio of security products covers all common platforms and offers companies and consumers worldwide the perfect balance between performance and proactive protection. The company has a global sales network in over 180 countries and branches in Jena, San Diego, Singapore and Buenos Aires. For more information, visit www.eset.de or follow us on LinkedIn, Facebook and Twitter.