date

Dangerous Anatsa and SparkCat Trojans Hidden in PDF Exposed

The dangerous Anatsa and SparkCat trojans disguised as PDFs have been exposed

Another serious warning for smartphone users: even the app stores considered the most trustworthy are not free from cybercriminals. According to the latest information, new malware targeting personal data and bank accounts has been identified on Google Play and the App Store platforms. Zamin.uz provides detailed information about these “cunning” trojans threatening your digital security.

Anatsa: What was the ordinary PDF reader actually?

Another banking trojan — Anatsa — has surfaced on Google Play. The app presented itself as a useful and harmless PDF file reader app. According to experts from Kaspersky Lab, the app was downloaded more than 10,000 times before being removed and even climbed to top rankings in the “Tools” category.

According to cybersecurity expert Dmitriy Kalinin, the criminals acted according to a very carefully planned scheme:

  • Winning trust: At first, a completely clean and harmless app is placed in the store.

  • Hidden update: After successfully passing moderation review, malicious functions are added to the app.

  • Stealing data: The in-app “dropper” downloads an additional APK file. This file has broad system privileges and begins stealing the user’s bank cards and secret passwords.

SparkCat: Your photo gallery is under control!

Another dangerous development is the updated version of the SparkCat trojan. It has been identified not only on Google Play, but also on the App Store. This app disguises itself as a corporate messenger or food delivery service.

The main danger of SparkCat is that it carefully analyzes photos in the smartphone gallery. It looks for secret words (seed phrases) or text data used to restore access to crypto wallets. If such information is found, it immediately falls into the hands of criminals.

How can you protect yourself?

Experts remind users that downloading apps from official stores does not guarantee 100% security. To stay protected, pay attention to the following:

  1. Check permissions: Pay attention to why a simple PDF reader is asking for access to your contacts or messages.

  2. Monitor app behavior: If, after installation, the app suspiciously starts downloading additional files, delete it immediately.

  3. Avoid third-party resources: Do not download anything from suspicious websites that imitate official stores.


Dear readers, do you read the permissions apps ask for when installing them? How much do you trust the security of your private photos and banking information on your smartphone?

Keep following the most important and timely news from the world of technology on Zamin.uz.

Ctrl
Enter
Found a mistake?
Select the phrase and press Ctrl+Enter
Information
Users of Guest are not allowed to comment this publication.
News » Technology » Dangerous Anatsa and SparkCat Trojans Hidden in PDF Exposed