Millions of Android users warned over FAKE lock screen that steals their phone’s PIN and raids bank accounts

MILLIONS of Android users are warned implicit a fake fastener surface that steals their phone's password and raids slope accounts.

Experts person issued warnings aft an Android-specific banking microorganism was recovered to person caller variants.

A staggering fourty caller variants of the TrickMo Android banking trojan person been identified.

They person been designed specifically with the intent to bargain Android pins, according to reports successful Bleeping Computer.

Not each variants person entered saltation yet but Trickmo was archetypal documented successful September 2019, its archetypal known attack.

Key caller features see interception of a one-time password, surface signaling and more.

The malware tries to instrumentality vantage of a device's almighty accessibility work permissions truthful that it tin assistance itself other permissions and pat connected prompts automatically.

The banking trojan past confronts affected users with phishing login screens to assorted banks successful a bid to bargain their credentials truthful attackers tin execute unauthorised transactions.

Experts from US mobile information steadfast Zimperium person looked into the variants and noticed a dodgy caller deceptive unlock screen.

It mimics the existent Android unlock punctual and this is however they get their victims.

"The deceptive User Interface is an HTML leafage hosted connected an outer website and is displayed successful full-screen mode connected the device, making it look similar a morganatic screen," Zimperium reports.

They added: "When the idiosyncratic enters their unlock signifier oregon PIN, the leafage transmits the captured PIN oregon signifier details, on with a unsocial instrumentality identifier (the Android ID) to a PHP script."

And stealing the PIN means cyber criminals tin unlock the instrumentality erstwhile it's not actively monitored to perpetrate fraud - peculiarly precocious astatine night.

Zimperium recovered a whopping 13,000 victims known to beryllium affected by the nasty malware.

Most were recovered successful Canada but radical successful the UAE, Turkey, and Germany were besides identified arsenic victims.

Zimperium explained: "We discovered millions of records wrong these files, indicating the extended fig of compromised devices and the important magnitude of delicate information accessed by the Threat Actor."

The microorganism is spreading through phishing truthful to trim the hazard of falling victim, the experts accidental it's champion to debar downloading apps connected Google Play done SMS links oregon nonstop messages by radical you don't know.

Google Play Protect identifies and blocks known variants of TrickMo truthful it's important to cheque it's progressive and protecting your device.