BaFin warns of "Godfather": malware steals bank data from apps
Created: 01/11/2023 07:54
By: Johannes Nuss
The Federal Financial Supervisory Authority warns of the "Godfather" malware.
It is intended to copy user login data when they enter it.
Frankfurt – The financial supervisory authority BaFin (Federal Supervisory Authority for Financial Services) warns of the "Godfather" malware.
According to BaFin, the malware should be able to attack a total of around 400 banking and crypto apps, including those from operators in Germany.
BaFin warns of "Godfather": malware steals bank data from apps
How exactly the software gets onto the infected end devices of consumers has not yet been clarified, write the Frankfurt financial experts.
It is known that "Godfather" displays fake websites from regular banking and crypto apps.
If the user then logs in with his login data, the cyber criminals will strike.
You will then receive the data via the malware.
The Federal Financial Supervisory Authority (baFin) warns of the "Godfather" malware.
© Sina Schuldt/dpa/Archive
The malware is said to be able to independently display push notifications on the infected end device.
The cybercriminals then want to use this to get the codes for the so-called two-factor authentication.
Finally, having the credentials and the ability to access the codes for two-factor authentication allows one to access consumers' accounts or wallets unhindered.
As stated in a report by the magazine t3n, the USA, Turkey, Spain, Canada, France and Great Britain are said to be affected in addition to operators from Germany.
It is not yet clear which apps will be specifically attacked.
The only thing that is certain is that it affects more than 400 of the programs.
BaFin warns of "Godfather": malware steals login data for online banking from apps
According to BaFin, the malware "Godfather" ensures that users are shown a fake website instead of the real banking or crypto apps.
If consumers then log in via these websites, their login data – for example for online banking – is transmitted to the cyber criminals.
As t3n writes in its report, the "Godfather" malware has so far been detected on Android devices in more than 16 countries.
That could mean that "Godfather" could come from the Google Play store when downloading a normal app.
In the meantime, however, the software is said to have been modified to such an extent that it bypasses the latest security standards for Android devices.
