CBI issues alert on banking theft malware

NEWDELHI:THE Central Bureau of Investigation (CBI) has alerted police forces and central security agencies on an Interpol input about a malicious software, Cerberus, that infects phones to steal financial data by luring the user through SMSES, camouflaged as Covid-19 information, to download links containing the virus, officials said Tuesday.

Once downloaded, after opening the link, the virus infects the phone by deploying its malicious application that is used by phishing gangs to steal bank-related financial information of the user from the phone, they said.

After getting the global input, the agency, which is mandated to coordinate with the International Police Organisation (Interpol) as the national central bureau for India, alerted police forces of all states and union territories, besides central security agencies, the officials said.

In its message to Interpol liaison officers (ILOS) of all states and UTS, CBI said that the banking Trojan primarily focuses on stealing financial data such as credit card numbers, they said.

The ILOS are officers deputed in every state police organisation to liaison with the CBI over matters related to Interpol.

Also, it can use overlay attacks to trick victims into providing personal information and can capture two-factor authentication details, they said.

In an unconnected statement on May 6, Craig Jones, director of cybercrime, Interpol, had said that the police and the cybersecurity industry had seen a considerable increase in the number of targeted cyberattacks by criminals since the virus’ outbreak began.