A new and highly dangerous Android malware, dubbed BingoMod, has emerged as a significant threat to mobile device security. Disguised as legitimate security applications, this malware employs sophisticated techniques to steal user data, initiate fraudulent transactions, and ultimately wipe infected devices.

The malware seeks permission to access accessibility services within the device

BingoMod is primarily distributed through SMS phishing campaigns, mimicking the appearance of well-known security apps to deceive unsuspecting victims. Once installed, the malware seeks permission to access accessibility services, granting it extensive control over the device.

By stealing login credentials, intercepting SMS messages, and taking device screenshots, BingoMod enables remote attackers to execute on-device fraud and drain victims’ bank accounts. To cover their tracks, the malware can remotely erase all device data, making recovery difficult.

Security experts urge Android users to exercise caution when clicking on links or downloading apps from unknown sources. Keeping devices and security software up-to-date is crucial in mitigating the risk of infection. As this threat continues to evolve, it is essential for users to remain vigilant and adopt best practices for mobile security.

(Via)

The post BingoMod Malware Threatens Android Users via SMS Phishing Campaigns appeared first on Gizmochina.

Scammers posing as Google employees have once again hit the internet, targeting unsuspecting users with a Gmail scam. The bait? A fake email notification, informing users they have won a prize for being the 18.25 billionth searcher on the search engine giant’s platform. The email subject line reads “Online Reward Program,” and entices users to click on a link to claim their prize.

The Link Redirects Users to a Fake Phishing Website

It’s easy to see how people can fall for the scam. After all, who doesn’t want to win a prize? But, it’s important to note that Google does not reward users for using its search engine. The link included in the email takes users to a fake phishing website that tricks them into giving out their personal data and credentials, leaving them vulnerable to identity theft and financial fraud.

This scam is not new and has been circulating for some time now. The fact that it’s still prevalent shows that cybercriminals are still able to deceive people. In a world where so much personal information is readily available online, it’s more important than ever to be vigilant about the messages we receive and the links we click on.

The scam has prompted Google to issue a warning to its users, urging them to be cautious when browsing the web and to flag anything suspicious. This is not the first time Google has had to issue such a warning, and it likely won’t be the last.

The best way to avoid falling victim to scams like this is to be skeptical of any message or email that claims you have won a prize or asks for your personal information. Always verify the authenticity of the email and the sender before clicking on any links or entering any data. Remember, if something sounds too good to be true, it probably is. Stay alert and stay safe.

RELATED:

• Gmail Gets Optimized Interface for Foldable Phones Like Galaxy Z Fold 4
• Pixel Watch and Other WearOS Devices Might Get Support for Gmail and Google Calendar Soon
• Best Smart Lights in 2023 – Philips, TP-Link, Govee & More

(Via)

The post This Simple GMail Scam can Cost You a Lot of Money appeared first on Gizmochina.

Microsoft OneNote is a digital note-taking application that allows users to create and organize notes, drawings, and audio recordings in one place. It is available as part of the Microsoft Office suite or as a standalone application. OneNote provides a flexible and customizable workspace for users to capture and organize their thoughts and ideas. Users can also share their notebooks with others, collaborate in real-time, and access their notes from anywhere with an internet connection. OneNote has become a popular tool for students, professionals, and individuals looking to streamline their note-taking and organization processes. Its features include the ability to clip web pages, highlight text, add tags, and search for notes easily.

Microsoft is set to release an update to its OneNote application in April to improve its protection against known high-risk phishing attacks. The move comes after TrustWave reported in January that attackers were using OneNote’s native .one file format to launch phishing attacks via email. When users open OneNote attachments, they see a blurry thumbnail and a “View Document” button. If the button is clicked, a security alert pops up, warning that opening the attachment could harm the computer and data.

If the user ignores the warning and clicks OK, a WSF file in OneNote is executed. WSF, or Windows Script File, is used by Microsoft Windows Script Host. If the user still chooses to proceed, the WSF file embedded in OneNote will then run a PowerShell command to download and execute the file from the internet. The new feature is expected to provide greater protection for OneNote users against phishing attacks.

RELATED:

• Here’s How Microsoft Plans to Bring Call of Duty: Warzone to the Nintendo Switch
• Microsoft Bing Has Hit the 100 Million Daily Active Users Milestone
• Best Tablets under $500 – Android and iOS

(Via)

The post Upcoming Microsoft OneNote Update will Provide Protection Against Phishing Attacks appeared first on Gizmochina.