Drinik Malicious Android app masquerades as an Income Tax Department app and after installation, the app asks the user to give necessary permissions like SMS, Call Log, Contacts, etc. The Application steals user information like PAN, Aadhaar number, address, date of birth, mobile number, email address and financial details like account number, IFS code, CIF number, debit card number, expiry date, CVV and PIN.
OVERVIEW
▪ Android malware Drinik campaign is targeting Indian bank users and steals mobile banking data and money.
▪ Drinik has targeted more than 27 public and private sector Indian banks.
▪ In 2016, The Drinik Android malware was created as SMS hacker for stealing short message service (SMS) data.
▪ These attack campaigns can effectively jeopardize the privacy and security of sensitive customer data and result in large-scale attacks and financial frauds.