Beware of Fake Chrome Update that Installs Cerberus Banking Malware

A new threat looms over Android users, masquerading as a routine Chrome update.

This deceptive tactic breaches trust and directly assaults personal security, installing the notorious Cerberus banking malware onto unsuspecting devices.

Here’s what you need to know about this alarming development and how to protect yourself.

The Lure of the Fake Update

Fake updates are a longstanding tool in the arsenal of cybercriminals, exploiting the general public’s trust in software updates to deliver malicious payloads.

Free Webinar : Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities. :

• The problem of vulnerability fatigue today
• Difference between CVSS-specific vulnerability vs risk-based vulnerability
• Evaluating vulnerabilities based on the business impact/risk
• Automation to reduce alert fatigue and enhance security posture significantly

AcuRisQ, that helps you to quantify risk accurately:

Book Your spot

While computers have traditionally been the prime targets, the focus has increasingly shifted towards mobile devices, particularly those running the Android operating system.

The latest scheme involves tricking users into downloading what appears to be a Chrome browser update, with file names like “Chrome_Update_[random version number].apk” or simply “Chrome.apk.”

However, these files are far from benign updates; they are carriers for Cerberus, a sophisticated Android banking malware with capabilities that should concern us all.

Broadcom has recently released a report highlighting the prevalence of Cerberus, a banking Trojan masquerading as a fake Chrome update in the mobile threatscape.

The Cerberus Threat

First identified in the cyber threat landscape around 2019, Cerberus is not your average malware.

It boasts remote access capabilities, allowing attackers to control an infected device completely.

This malware specializes in stealing financial information, such as banking login credentials and credit card details, directly from your mobile device.

Its ability to bypass security measures and remain undetected makes it a formidable tool for cybercriminals.

The emergence of malware like Cerberus, disguised as routine updates, underscores the evolving nature of cyber threats.

It’s a stark reminder of the importance of vigilance in the digital age.

By taking proactive steps to verify the authenticity of updates and employing robust security solutions, Android users can significantly mitigate the risk of falling prey to such sophisticated attacks.

With Perimeter81 malware protection, you can block malware, including Trojans, ransomware, spyware, rootkits, worms, and zero-day exploits. All are incredibly harmful and can wreak havoc on your network.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.