Quick-thinking crooks have found a way to sneak malware that steals your banking information onto your Android phone. Cyber security firm Zscaler says the malware known as Android Marcher is posing as the highly anticipated Super Mario Run game from Nintendo.
Super Mario Run is currently available in the Apple App store for iPhones, but it’s not yet available for Android. Crooks tried a similar scam back in the summer with Pokemon Go.
Android Marcher is a particularly tricky malware that targets banking, financial, credit card, and other apps. Once it embeds itself o your phone, it waits for you to open a financial app to pay a bill or check a balance. Then it covers that app with a fake overlay that asks for information like passwords, account numbers, and security questions. For example, it puts up this overlay when you open the Google Play store and won’t let you in until you supply a card number.
Marcher then sends that information to the hackers who can now rob you blind. In the past, Marcher has posed as other games and even as security updates. How do you avoid Marcher?
It’s pretty simple. Only install apps from the official Google play store. These fake apps often sneak on your phone when you use third-party app stores. Remember, if someone offers you something that’s not available in the official apps store yet, it is more than likely not legitimate.