@scottalanmiller said in Android Banking Malware:
Active users of mobile banking apps should be aware of a new Android banking malware campaign targeting customers of large banks in the United States, Germany, France, Australia, Turkey, Poland, and Austria. This banking malware can steal login credentials from 94 different mobile banking apps. Due to its ability to intercept SMS communications, the malware is also able to bypass SMS-based two-factor authentication. Additionally, it also contains modules to target some popular social media apps.
Defeats two factor authentication!!
Honestly, any vendor using Flash is just asking for this.
SMS has never been a secure factor. Easy to intercept on wireless networks, even more on smartphones where an malicious app has access to the GSM modem or messaging API.