There are no limits to the lengths pesky online pickpockets will go to in order to pilfer your personal data. Take the latest malware warning from the fraud analysts at Trend Micro surrounding insta-success Instagram where the entire official app web page has been mimicked to trick Android users into downloading a Trojan.
The insidious Instagram installer, while looking legitimate, features on a Russian language site, and once the app is downloaded onto a device it immediately starts sending SMS messages to premium-rate numbers, without authorisation, racking up the roubles for the cyber-crooks behind them.
Researchers at Trend Micro have also reported encountering several other fake websites recently, sites pretending to be official download pages for games like Fruit Ninja, Temple Run and Talking Tom Cat, highlighting a new trend of trickery amongst Trojan touts.
Echoing the advice we’ve long given here at LOA, Karla Agregado at Trend Micro points out the best way to avoid rogue apps: “Users are advised to remain cautious before downloading Android apps, especially those hosted on third-party app stores.” Which, in a nutshell, means stick to Google Play.