Description

Q&A

What is SpyLocker (SpyAgent) malware?

SpyLocker (SpyAgent) is a new Android threat that collectsdataon your device and sends it to a server. It targets customersoflarge banks in Australia, New Zealand and Turkey. Thisbankingmalware steals login credentials from 20 mobile banking appsusingfake login screens. This information is sent to a commandandcontrol server to be used at a later time for profit.

How does SpyLocker (SpyAgent) malware work?

1. SpyLocker (SpyAgent) generates an overlay to coverthelaunched banking application login screen, which can’t beskippedunless you enter your mobile banking credentials.
2. If you enter your banking credentials, your information willberecorded and passed to the server of cybercriminals.
3. SpyLocker can even bypass two-step authentication byinterceptingall texts (SMS) from the bank and immediately removethem from theclient device, so as not to attract anysuspicion.
4. If you attempt to delete the fake Flash Player, a falseoverlaymessage will claim that the “Administrator will bedeactivated”.This false warning blocks access to deactivate thedeviceadministrator privilege so you will not be able to completetheuninstall.

Note: In addition to targeting mobile banking apps,SpyLockeralso tries to obtain your Google, Skype, eBay, and PayPalaccountcredentials.

Will McAfee SpyLocker Remover fix theSpyLockervulnerability?

Yes, the McAfee SpyLocker Remover is designed to scanyourAndroid device and remove SpyLocker malware if detected. Here’showit works:
1. If the fake Flash Player is found, you will be redirected totheDevice Administrators privilege where you will see FlashPlayerlisted.
2. McAfee SpyLocker Remover will prevent the malware fromblockingaccess to the Device Administration list.
3. Once you successfully deactivate the malware from the list,youcan uninstall the malware via Settings >App/ApplicationManager > Flash Player > Uninstall.

How do I know whether or not my Android device isinfectedwith SpyLocker malware?

There are few ways to confirm if your Android device isinfectedwith SpyLocker malware:
1. Download McAfee SpyLocker Remover and initiate a device scan.Thescan will alert you if your device is infected.
2. Check Device Administrators found under Settings >Security>Device Administrators and look for Flash Player.If youcan’t remove it from the administrators list and you areblocked byan overlay screen, your device is infected.

How do I prevent SpyLocker malware from attacking myAndroiddevice?

SpyLocker (SpyAgent) malware is only available fromuntrustedthird party sources. Avoid installing apps from anyunknownsources, especially those seeking device administrationprivileges.For real-time safeguard of your device, McAfee MobileSecurityprovides proactive protection to SpyLocker malware,alerting you ifyou need to remove the malware.

Do I need to install this app if I am currently aMcAfeeMobile Security user?

McAfee Mobile Security provides real-time protection todetectmalware and its variants and alerts you if you need to removethemalware. If your device is not affected by SpyLockermalware,McAfee Mobile Security is all you need to keep you freefrommalware. However, if your device is already infected, you willneedto download and install McAfee SpyLocker Remover in order toremovethe malware.

Learn More about SpyLocker: https://blogs.mcafee.com/consumer/spylocker-malware-what-you-need-to-know/

►Download McAfee Mobile Security: http://m.onelink.me/2e8bcef1
►Like us on Facebook: https://www.facebook.com/Intelsecurity
►Follow us on Twitter: https://twitter.com/Intelsecurity