Technology

70285 readers

3166 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

407

In case you missed it: Bank info-stealing malware found in 90+ Android apps with 5.5M installs (mashable.com)

submitted 11 months ago by [email protected] to c/[email protected]

104 comments fedilink hide all child comments

(page 3) 7 comments

sorted by: hot top controversial new old

[–] [email protected] 12 points 11 months ago

Anatsa uses advanced techniques to avoid >detection and gain access to banking >information.

Anyone who knows what those advanced techniques are?

[–] [email protected] 221 points 11 months ago (1 children)

no list of apps anywhere

[–] [email protected] 161 points 11 months ago (2 children)

Jup. It just says that "the malware was disguised as PDF and QR code readers".

Not helpful, Mashable. Not helpful at all.

[–] [email protected] 55 points 11 months ago (2 children)

In fairness to Mashable, this isn't their fault. The people that made the report didn't make the list public.

load more comments (2 replies)

load more comments (1 replies)

[–] [email protected] 40 points 11 months ago (7 children)

And this right here is why you use open source apps.

[–] [email protected] 32 points 11 months ago (21 children)

This only would work if you check every line of source code, even the dependencies and build chain, and then build it yourself. See xz utils backdoor or heartbleed, etc.

[–] [email protected] 40 points 11 months ago (6 children)

The whole point is that at some point somebody can check, and you can have a higher level of trust in that than proprietary software.

And if someone does something like this then it has to be disguised as an innocuous bug, like heartbleed, they can't just install full on malware.