Security Warning for Android Users: Fake Antivirus App Steals Data

Cybersecurity experts have warned of a new malicious campaign targeting Android phones through a fake antivirus app called TrustBastion, which steals personal and banking data and gives attackers control over devices.

How the Attack Works

The TrustBastion app initially appears to be an official tool for protecting the phone from viruses and malware, displaying notifications about system issues and requesting the installation of a "necessary" update. In reality, this update contains malicious code that, once installed, can:
Take secret screenshots without the user's knowledge.
Display fake login forms for financial services to steal account data.
Capture screen lock codes and passwords and send them to the attackers' servers.
Experts noted that the campaign recently emerged via the AI model-sharing platform Hugging Face, making it harder for unsuspecting users to detect, and that hackers quickly republish copies of the app after removal with minor changes in appearance but the same malicious behavior.

Tips to Protect Your Phone

Download apps only from official stores like Google Play, where apps undergo strict security checks.
Read user reviews and comments before installing any app, and verify the developer's credibility.
Avoid downloading APK files from untrusted external sources, as they are often a source of malware.
Use certified antivirus software and enable Google Play Protect to scan apps and warn of any suspicious behaviors.
Staying cautious and vigilant remains the best means of protection against malicious apps, especially those claiming to protect your device while actually being a means to steal your sensitive data.