According to an analysis published by ThreatFabric, devices that use Google as a search engine could fall prey to the Brokewell virus. This is malware disguised as an update capable of stealing data and recording access to any type of app.
The Dutch research company ThreatFabric published a long analysis on Brokewella malware that would be able to enter the smartphone bank app and steal everything that remains in the bank account. According to ThreatFabric, the malware is capable of attacking users Google as a search engine: he would be hiding right in the updates but outside the traditional paths.
Brokewell is not located in the official Google app updates and it is not even found within the pages of the browser that can be used from desktop. It is located in fake pagesfake updates that appear as you move from page to page.
From the images published by ThreatFabric you see pages where you read warnings like “Your browser needs an update”. Below the warning appears a button to click and a file to download. Once the downloadthe virus is in the smartphone: just one click to start it.
Down from Banca Sella and Hype, the press release: “The services are now operational”
How Brokewell works
From what is explained in the analysis Brokewell can be associated with a trojan, viruses that penetrate the system by pretending to be other services. Among the features of Brokewell analyzed by researchers is the ability to record audiosave screenshots and even access call logs.
The most worrying features, however, concern the ability to record all steps made by the user on the screens. This way you can record each security code. From passwords for social networks to pins for bank app.
Google’s response
According to The Hacker News, a portal specializing in cybersecurity, a Google spokesperson has released an official comment to clarify that there is no safety issue related to malware: “Android users are automatically protected against known versions of this malware by Google Play Protect, which is active by default on Android devices with Google Play Services.”
