CERT-In issues advisory for BlackRock malware targeting Android phones

NEW DELHI: The Indian Computer Emergency Response Team (CERT-In) has issued an advisory warning users about a new Android malware strain, called “BlackRock”. This malware comes with data stealing capabilities, and is attacking a wide range of Android apps.
“The malware is developed using the source code of Xerxes banking malware, which itself is a variant of LokiBot android Trojan. The noteworthy feature of this malware is that the target list of applications of this malware which contains 337 applications includes not only banking and financial applications but also non-financial well known commonly used brand name apps on Android,” said CERT-In in its advisory.
The BlackRock malware can steal credentials and credit card information from apps like email clients, e-commerce apps, virtual currency, messaging/social media apps, entertainment apps, banking, financial apps etc. The attack campaign is active globally.