Another Android Malware Ravages the Google Play Store

In the latest installment of the never-ending battle between cybercriminals and tech companies, yet another malware has torn its way through thousands of Android devices. Let’s find out what it is, and if you should be concerned, shall we?

What’s all the Hubbub?

This malware, which has been given nicknames like “TeaBot” and “Anatsa,” works similarly to the last Android malware we talked about just a few days ago. Both hide on the Google Play Store pretending to be helpful apps. While some advertise that they will enhance the user’s device, some act as useful tools.

In this instance, TeaBot disguised itself as a QR code app named “QR Code & Barcode Scanner” and is responsible for infecting over 10,000 Android devices.

Interestingly enough, this isn’t TeaBot’s first rodeo.

TeaBot Strikes Back

As it turns out, TeaBot was first discovered by Cleafy nearly a year ago in May of 2021. Back then, it utilized streaming software and exploited Android’s accessibility settings in order to grant remote access to the screens of infected devices to the malware creators. Its main function at the time was to steal data from apps working with 60 different banks from around the world.

This time around, the TeaBot trojan serves a new purpose: to steal data from apps that work with:

• Home Banking
• Insurance
• Crypto Wallets
• Crypto Exchanges

While this might seem like an unnecessary change from the developers of TeaBot, it actually fits into a broader narrative about cybercrime and cryptocurrencies, which we have covered before. Additionally, this new version of the malware greatly expands upon its reach, with experts noting that the number of targeted applications “have grown more than 500%, going from 60 targets to over 400.”

Preventative Measures

TeaBot might be a threatening piece of software, but it easily deterred by a few simple procedures, many of which we have previously spoken about. Another critical component to protecting your data is by only downloading apps that have been verified by either the App Store for Apple devices or Google Play Protect for Android.

Aside from that, you can also hide your information from scammers and online miscreants by downloading Redact! Within moments, you can discreetly remove thousands of posts containing personal information from an expansive list of social media accounts, saving yourself from hours of tedious scrolling and deleting!

You might be wondering, “is there a subscription or fee?” The answer is simple - nope! It’s all free! With that in mind, protect your online presence by downloading Redact for Windows, MacOS, and now Android, at redact.dev/download!