Roskatchestvo published a warning that attackers have begun to intensively exploit the situation with the removal of official Russian banking apps from the App Store, Google Play and AppGallery online stores.
Recently, applications from Alfa Bank, Sberbank, VTB, Otkritie, Sovcombank, Promsvyazbank and Novikombank have become unavailable for installation from official stores. The press service of Roskachestvo warns:
After a number of mobile versions of banking clients were removed from app stores, third-party fakes began to spread online. Fraudsters have already begun to distribute malware en masse under the guise of apps or ways to remove restrictions.”
Information about fake apps is mostly distributed via social networks and Telegram channels, where attackers urge users to follow a link and download the app file. Sometimes a file with a fake app is attached directly to a message. All of these messages are supposedly from official channels: attackers change the name of the profile to a similar one.
Sergei Kuzmenko, senior digital product testing specialist at Roskatchestvo, explained:
Roskachestvo urges never to download files or applications from unknown sources. This can lead to infection of the device with virus software and, as a consequence, complete or partial loss of funds in bank accounts. All information about ways to circumvent bans should be obtained from official sources – the sites of banks.