Everything you need to know about ransomware: how it started, why it's booming, how to protect against it, and what to do if your PC is infected. The malware is a variant of FakeApp, an Android trojan that attackers have been using to display advertisements and collect information from compromised devices since 2012. Now the malware has set its sights on stealing the user IDs and passwords of Uber accounts. Uncovered by researchers , the malware displays a spoofed version of the Uber app, encouraging the user to enter their user ID in the form of their registered phone number and password. Once this information is entered, it sends the information to a remote server. It's likely the attackers will either attempt to exploit this stolen information for their own gain, performing scams, or try to sell it to others. Whatever their ultimate aim in stealing Uber credentials, those behind FakeApp have gone out of their way to ensure this version of the malware hides its tracks and doesn't arouse suspicion from the user. The malware users a fake Uber overlay to steal user credentials. Image: Getty In order to do thus, the malware shows the user a screen of the legitimate Uber app which displays their current location - which is what happens with the real Uber when the user logs in to request a ride. The attackers achieve this by using deep links within the Uber application in order to specifically redirect to the Ride Request activity section of the app - all while the victim remains none the wiser that they've been duped by a malicious version of the app. The malware isn't downloaded from the Google Play store itself, but rather comes from downloading applications from third-party websites, and isn't thought to be widespread. In order to protect against falling victim to FakeApp, Uber recommends that users only download apps from the official Android marketplace. The company also said it has safeguards in place to ensure that users' accounts are protected, and can't be abused by hackers and other unauthorised users. In order to have the greatest chance of staying safe from malware, Symantec recommends Android users stick to downloading apps from Google Play -. Recent and related coverage Malware steals login details of online banking customers of TD, Des-Jardins, RBC, Scotia Bank, and Banque National in Canada. You agree to receive updates, alerts and promotions from CBS and that CBS may share information about you with our marketing partners so that they may contact you by email or otherwise about their products or services. You will also receive a complimentary subscription to the ZDNet's Tech Update Today and ZDNet Announcement newsletters. You may unsubscribe from these newsletters at any time.
