“Invisible Man” A New Virus Targeting Android Devices

A new form of malware is attacking Android devices by showing a flash update that needs to be installed as soon as possible, warned by Security researchers. 

According to SophosLabs, its is a fake update and contains a malware that is known as Invisible Man and showed as Andr/Banker-GUA. Based on Svpeng malware, it was first noticed in 2015 as reported by a security firm. It will draw things on your screen above your apps while using accessibility services and set itself as default SMS app. 

 If the use of accessibility services is granted to Invisible Man then it forms itself as default SMS app. Doing this will allow it to control the screen and the user credit card information is stolen as user provide it in apps and Google play store. 

To creates invisible overlays, we draw something on the screen over the legitimate banking apps. The user thinks that they are filling up the information like username and password over the app. This is one of those attempts that steal the financial details of the user and this has taken over the Google Play Store. When users use Google Play store to install the apps, the need to provide their credit card information and their information is sent to attackers. 

It is surprising to know that this malware does not infect the Russian users. When it conceding a device, it checks the language and in case the language in the phone is Russian, it stopped all other tasks. If the phone is set to any other language and then this malware ask for permission in order to get the accessibility services and then it run malicious code. 

To prevent such new malware, the best solution is to avoid installing bogus Flash Player updates. In case, you installed them by mistake, then don’t give them access to the operating system. 

It is recommended to always download apps from trusted platform like Google Play because every app is reviewed before publishing in the Google play. 

Play store app is scanned before and after installation and if you receive any warning from play protect while installing any app then do not install that app.

 

Read More

How to remove Department of Justice Virus Free by Norton Power Eraser

The Department of Justice Virus is a Malware or ransomware that fakes as an alert or a warning from the Department of Justice that you are involved in illegal cyber activity and demands that you pay a fine or end up in jail.

In other words, this computer virus claiming to be from the Department of Justice, locks your PC for a ransom!!!

Department of Justice Virus/ Malware/ Ransomware/ Green Dot Virus Removal Instructions: 

1) Start by shutting down your computer by holding the power button for ten seconds.
2) As the system restarts, press F8 key twice to bring up the advanced boot options.
3) Use the down arrow to select "Safe Mode with Networking" option.
4) Using the browser, go to http://norton.com/npe
5) Click the button "Download Norton Power Eraser" (this antivirus will uninstall Department of Justice Virus)
6) Save it to the Desktop and double click icon to run the exe file
7) Agree to the User License terms
8) As soon as Norton Power Eraser initializes, click 'Scan for Viruses'
9) Let it Restart to scan
10) Tap F8 again as the computer reboots
11) Use the down arrow to select "Safe Mode with Networking" option again.
12) Click Run to allow Norton Power Eraser to automatically scan.
13) Once it finishes, you'll see the 'Scan Complete' window with the results of the infected file.
14) Click the Fix button at the bottom to remove Department of Justice virus, if found.
15) It will ask you to reboot or restart your system one more time. Click Restart.
16) When your computer reboots to normal mode, you'll see a confirmation that NPE uninstalled the Department of Justice Green Dot virus.

This Green Dot Threat guide is from http://www.youtube.com/watch?v=lpXRTlRn1X8

Read More