Vultur new bank-fraud malware analyst news with review guide
Recently detected mechanical man malware, some unfold through the Google Play Store, uses a completely unique thanks to supercharge the harvest of login credentials from over one hundred banking and cryptocurrency applications.
The malware, that researchers from Amsterdam-based security firm ThreatFabric ar line of work genus Vultur, is among the primary mechanical man threats
1. record a tool screen whenever one among the targeted apps is opened
Vultur uses a true implementation of the VNC screen-sharing application to mirror the screen of the infected device to associate attacker-controlled server,
How it works
fraud malware is to set a window on prime of the login screen given by a targeted app. The “overlay,” in and of itself windows ar sometimes referred to as, seems just like the computer programme of the banking app, giving victims the impression they’re coming into their credentials into a trusty piece of package. Attackers then harvest the credentials, enter them into the app running on a special device, and withdraw cash.
Vultur, like several mechanical man banking trojans, depends heavily on accessibility services built into the mobile OS. once 1st put in, genus Vultur abuses these services to get the permissions needed to figure. To do this, the malware uses associate overlay taken from different malware families. From then on, genus Vultur monitors all requests that trigger the accessibility services.
His next step
The malware uses the services to notice requests that return from a targeted app
. The malware conjointly uses the services to stop deletion of the app via ancient measures
.
Trick it uses
evolving into RAT-like malware, inheritable helpful tricks like police investigation foreground applications to begin screen recording,” ThreatFabric researchers wrote of the new genus Vultur approach in a post.
This brings the threat to a different level, in and of itself options open the door for on-device fraud, circumventing detection supported phishing MO’s that need fraud to be performed from a replacement device: With genus Vultur fraud will happen on the infected device of the victim. These attacks ar climbable and automatic since the actions to perform fraud is scripted on the malware backend and sent within the kind of sequenced commands.
How result users
whenever the user tries to access the app details screen within the mechanical man settings, genus Vultur mechanically clicks the rear button. That blocks the user from accessing the uninstall button. genus Vultur conjointly hides its icon.
Effect our apps
fitness pursuit or two-factor authentication. Despite the cloaking tries, however, the malware provides a minimum of one telltale sign that it’s running—whatever trojanized app put in genus Vultur can seem within the mechanical man notification panel as protruding the screen.
How enters in phone
The malware is put in by a trojanized app referred to as a pipet. So far, ThreatFabric researchers have found 2 trojanized apps in Google Play that install genus Vultur. that they had combined installations of concerning five,000, leading the researchers to estimate that the amount of genus Vultur infections is numbered within the thousands. in contrast to most mechanical man malware, that depends on third-party droppers, genus Vultur uses a custom pipet that has return to be referred to as Brunhilda.
Brunhilda is dangerous
The researchers found that Brunhilda was utilized in the past to put in completely different mechanical man banking malware referred to as Alien. In all, the researchers estimate Brunhilda has infected over thirty,000 devices. The researchers primarily based the estimate on malicious apps antecedently obtainable within the Play Store—some with over ten,000 installations each—as well as figures from third-party markets.
Solutions
While Google has removed all Play Market apps famed to contain Brunhilda, the company’s data suggests that new trojanized apps can in all probability seem. mechanical man users ought to solely install apps that give helpful services and, even then, solely apps from well-known publishers, once in any respect doable. folks ought to conjointly pay shut attention to user ratings and app behavior for indications of malice.
The Publicity
The malware is put in by a trojanized app often called a dropper. To date, ThreatFabric researchers have discovered two trojanized apps in Google Play that set up Vultur. That they had mixed installations of about 5,000, main the researchers to estimate that the variety of Vultur infections is numbered within the hundreds. In contrast to most Android malware, which depends on third-party droppers, Vultur makes use of a customized dropper that has come to be known as Brunhilda.
“This dropper and Vultur are each developed by the identical menace actor group,” ThreatFabric researchers wrote. “The selection of growing its personal personal trojan, as an alternative of renting third-party malware, shows a robust motivation from this group, paired with the general excessive degree of construction and group current within the bot in addition to the server code.”
The researchers discovered that Brunhilda was used prior to now to put in totally different Android banking malware often called Alien. In all, the researchers estimate Brunhilda has contaminated greater than 30,000 units. The researchers based mostly the estimate on malicious apps beforehand accessible within the Play Retailer—some with greater than 10,000 installations every—in addition to figures from third-party markets.
Vultur is programmed to file screens when any of 103 Android banking or cryptocurrency apps are operating within the foreground. Italy, Australia, and Spain had been the nations with probably the most banking establishments focused.
Apart from banking and cryptocurrency apps, the malware additionally harvests credentials for Fb, Fb-owned WhatsApp messenger, TikTok, and Viber Messenger. Credential harvesting for these apps happens by means of conventional keylogging, though the ThreatFabric publish didn’t clarify why.
Whereas Google has eliminated all Play Market apps recognized to comprise Brunhilda, the corporate’s observe file means that new trojanized apps will most likely seem. Android customers ought to solely set up apps that present helpful providers and, even then, solely apps from well-known publishers, when in any respect potential. Folks must also pay shut consideration to consumer rankings and app conduct for indications of malice.
Contact me: https://learnknowandgrow.blogspot.com/2021/06/contact-us.html
READER COMMENTS:
Sort comments by...
PAGE 12
NEXT
RocketFeathersArs Praetorianreplya day ago
This is why we can't have nice things.
Up +17 (+25 / -8) Down
485 posts | reg. May 4, 2015
rockforbrainsArs Scholae Palatinaereplya day agoReader Fav
What is the apps actual name? I do not do any banking on my phone but others do and it might be nice to know what to actually look for.
Up +32 (+33 / -1) Down
1064 posts | reg. Jan 29, 2013
Race.BannonSmack-Fu Master, in trainingreplya day agoNew Poster
[Gulp] This is unfortunately the new norm…am glad I made the switch to iOS about 5 years ago…I think [eye twitching]…
Up -1 (+32 / -33) Down
6 posts | reg. Oct 29, 2020
gulthawArs Tribunus Militumet Subscriptorreplya day ago
I know I am paranoid, will never deny that; but as IT with 20+ years of experience I have every right to be.
Apps have been and continue to be a REALLY BAD IDEA, give me a webpage every day of the week.
An app is it's only vector whilst a webpage has the server where is hosted (with the OS and everything else) plus the browser.
If a bank or anything else forces me to use an app I go straight to Android emulators, so I can play around and see Wtf is going on.
I will never use an app for important information and that's what I'd recommend to anyone asking
Up -23 (+22 / -45) Down
2635 posts | reg. Oct 6, 2006
SeuliSmack-Fu Master, in traininget Subscriptorreplya day ago
What does the attacker gain by recording the screen? I somehow miss this part in the article, I just can't figure this one out.
This malware already contains a keylogger for capturing all user inputs, important fields in any app or webpage are usually masking the input anyway. How do the attackers then analyze the screen recordings? How would this scale with 1'000 or 1 Mio infected devices? If this feature is to be used in a targeted attack it doesn't make sense either as notifies you about projecting the screen.
Are they looking for account numbers in the banking app or collecting dick pics for extortion?
Up +8 (+9 / -1) Down
63 posts | reg. Jan 13, 2017
KeyboardWeebArs Scholae Palatinaeet Subscriptorreplya day ago
Seuli wrote:
What does the attacker gain by recording the screen? I somehow miss this part in the article, I just can't figure this one out.
This malware already contains a keylogger for capturing all user inputs, important fields in any app or webpage are usually masking the input anyway. How do the attackers then analyze the screen recordings? How would this scale with 1'000 or 1 Mio infected devices? If this feature is to be used in a targeted attack it doesn't make sense either as notifies you about projecting the screen.
Are they looking for account numbers in the banking app or collecting dick pics for extortion?
It's using VNC, so while it doesn't appear to be used that way right now, the possibility is there for remote control. The screen recording could capture other data as you expect, and also act as a secondary way to capture the credentials.
Up +5 (+5 / 0) Down
1569 posts | reg. Sep 28, 2016
JMTronicHobbyistSmack-Fu Master, in trainingreplya day agoEditor's PickReader Fav
Seuli wrote:
What does the attacker gain by recording the screen? I somehow miss this part in the article, I just can't figure this one out.
This malware already contains a keylogger for capturing all user inputs, important fields in any app or webpage are usually masking the input anyway. How do the attackers then analyze the screen recordings? How would this scale with 1'000 or 1 Mio infected devices? If this feature is to be used in a targeted attack it doesn't make sense either as notifies you about projecting the screen.
Are they looking for account numbers in the banking app or collecting dick pics for extortion?
This way they can perform fraudulent transactions using the targeted phone instead of their own equipment. It's in the article. And most password entry on my phone shows each character as you type even though you don't see the entire password.
Up +36 (+36 / 0) Down
15 posts | reg. Apr 22, 2021
mmiller7Ars Praefectusreplya day agoReader Fav
gulthaw wrote:
I know I am paranoid, will never deny that; but as IT with 20+ years of experience I have every right to be.
Apps have been and continue to be a REALLY BAD IDEA, give me a webpage every day of the week.
An app is it's only vector whilst a webpage has the server where is hosted (with the OS and everything else) plus the browser.
If a bank or anything else forces me to use an app I go straight to Android emulators, so I can play around and see Wtf is going on.
I will never use an app for important information and that's what I'd recommend to anyone asking
I like the idea of apps but I hate how everything is SO bloated.
I also hate how so many "apps" are so bloated yet still can't do ANYTHING without full Internet access. Liek hdhomerun is 41 MB app, it connects to a tuner on my LAN (which doesn't even need Internet to work), but without Internet the App won't open. If I manually go to the hdhomerun's web-UI I can click a link and open in whatever native media player just fine as a MPEG stream.
Up +30 (+30 / 0) Down
7907 posts | reg. Oct 30, 2014
valkyriebikerArs Scholae Palatinaeet Subscriptorreplya day ago
JMTronicHobbyist wrote:
show nested quotes
This way they can perform fraudulent transactions using the targeted phone instead of their own equipment. It's in the article. And most password entry on my phone shows each character as you type even though you don't see the entire password.
Exactly. And since the fraud took place on the victim's device then convincing the bank that "hey, I didn't do that" could be very difficult. All the bank sees is the victim device accessing their servers.
Up +15 (+16 / -1) Down
966 posts | reg. Sep 28, 2012
ZorroArs Tribunus Militumreplya day ago
Well, so much for that. Back to Cash Only.
Up +3 (+3 / 0) Down
2953 posts | reg. Jun 23, 1999
SeuliSmack-Fu Master, in traininget Subscriptorreplya day ago
JMTronicHobbyist wrote:
show nested quotes
This way they can perform fraudulent transactions using the targeted phone instead of their own equipment. It's in the article. And most password entry on my phone shows each character as you type even though you don't see the entire password.
It's mentioned in the article as a possibilty, you're right. VNC shares the current screen, so does this work also when the phone is locked and charging at night? Access device through VNC, unlock, start app and make transactions? Or does the phone need to be unlocked for this 'screen projecting' feature to work? If so I imagne users will notice when someone else takes control of your screen.
This feature seems to more a proof on concept than a something useful for the attackers until the next iteration of this malware.
Up +4 (+5 / -1) Down
63 posts | reg. Jan 13, 2017
malorArs Tribunus Angusticlaviuset Subscriptorreplya day agoEditor's PickReader Fav
This is a lot of why I don't install apps anymore, beyond the absolute basics: my bank, Authy, and Steam, and that's it. And I'm not entirely sure about Authy.
Google is doing such an awful job of protecting against malware that their entire store is pretty much useless to me.
Up +25 (+33 / -8) Down
7686 posts | reg. Aug 8, 2003
unconcernedArs Scholae Palatinaereplya day agoReader Fav
gulthaw wrote:
I know I am paranoid, will never deny that; but as IT with 20+ years of experience I have every right to be.
Apps have been and continue to be a REALLY BAD IDEA, give me a webpage every day of the week.
An app is it's only vector whilst a webpage has the server where is hosted (with the OS and everything else) plus the browser.
If a bank or anything else forces me to use an app I go straight to Android emulators, so I can play around and see Wtf is going on.
I will never use an app for important information and that's what I'd recommend to anyone asking
And most apps are glorified webpages , often with inferior stability.
Up +27 (+28 / -1) Down
641 posts | reg. Dec 24, 2015
unconcernedArs Scholae Palatinaereplya day agoReader Fav
Btw , since this malware is targeting banks i would name it Vaulture
Up +26 (+27 / -1) Down
641 posts | reg. Dec 24, 2015
BrodifacoumSmack-Fu Master, in trainingreplya day ago
I guess I got lucky that my phone battery swelled up, breaking my cell phone 2 weeks ago.
Had to wait to order a new cheap phone until I had the money, it should arrive today. Maybe.
I’ll get a better phone in November for my birthday. Of course, it will be gift, from me to me. lol
Up -14 (+3 / -17) Down
58 posts | reg. Nov 15, 2014
Nop666Ars Tribunus Militumreplya day ago
rockforbrains wrote:
What is the apps actual name? I do not do any banking on my phone but others do and it might be nice to know what to actually look for.
From TFA, it's a whole bunch of Trojenised apps, not just one.
Up -3 (+2 / -5) Down
2549 posts | reg. Jul 5, 2015
KevaduArs Centurionreplya day ago
And this is why I hate 'apps'...
Sure once in a while there's one that actually does something innovative and needs that level of access but they vast majority of them feel like they could have just been a website.
I am extremely paranoid about what I install on my phone.
Up +6 (+11 / -5) Down
388 posts | reg. Jun 2, 2017
Photon_plumberArs Scholae Palatinaereplya day ago
Ten downloaded (critical, dealing with money) apps give them ten times as many opportunities to screw with you versus just going to the URL directly. I’ll take the road of less probabilities by using the website thanks. And let’s not discuss privacy issues where an app (Facebook comes to mind) reads your contacts list and such.
Up +6 (+9 / -3) Down
1554 posts | reg. Apr 14, 2017
Rick C.Ars Centurionreplya day ago
They never created apps for convenience. They were created for marketing purposes to collect user data for targeted advertising. The security issues were seeing are the new icing on the cake. I’ve wiped all apps that use a credit card and go directly to the website, even Amazon.
Up +4 (+11 / -7) Down
351 posts | reg. Mar 12, 2019
HastArs Praefectusreplya day ago
gulthaw wrote:
Apps have been and continue to be a REALLY BAD IDEA, give me a webpage every day of the week.
An app is it's only vector whilst a webpage has the server where is hosted (with the OS and everything else) plus the browser.
If a bank or anything else forces me to use an app I go straight to Android emulators, so I can play around and see Wtf is going on.
I will never use an app for important information and that's what I'd recommend to anyone asking
This seems incredibly misguided to me. A web page is a lot more vulnerable than an app.
This attack would work on a webpage as well. (Even if it might be a bit more difficult to identify when ev a specific bank application is running compared to when a certain webpage is viewed.)
Bank applications can also (should also, if they are properly designed) protect against MIM attacks and lock out third party applications to make it less harmful if a user has access to account information. Naturally any application (or webpage) should also require solid two factor authentication to protect the user. Even if their login information is compromised.
However I will say that accessibility features are problematic for security. Now that these are becoming required by law I think we will see an increased push to improve security around them so they don't become more of a weak point.
(I am admittedly a bit biased in this as I work on banking applications.)
Up +20 (+22 / -2) Down
3307 posts | reg. Apr 19, 2000
unequivocalArs Praefectuset Subscriptorreplya day ago
gulthaw wrote:
I know I am paranoid, will never deny that; but as IT with 20+ years of experience I have every right to be.
Apps have been and continue to be a REALLY BAD IDEA, give me a webpage every day of the week.
An app is it's only vector whilst a webpage has the server where is hosted (with the OS and everything else) plus the browser.
If a bank or anything else forces me to use an app I go straight to Android emulators, so I can play around and see Wtf is going on.
I will never use an app for important information and that's what I'd recommend to anyone asking
Seems like an unusual view given all the vulnerabilities common on the web - browser sandbox breakouts, xss, server injections and other takeovers. There are a lot of ways to attack every internet method of user interface (email too). I'm not sure the app vs web distinction is as clear cut in favor of one vs the other, security-wise.
Up +17 (+17 / 0) Down
3001 posts | reg. Sep 13, 2007
SavedByTechnologyArs Scholae Palatinaeet Subscriptorreplya day ago
I only perform online banking with iOS apps if they offer FaceID or TouchID support. I was under the impression that apps are more secure, at least within the Walled Garden, am I mistaken?
Last edited by SavedByTechnology on Fri Jul 30, 2021 9:51 am
Up +1 (+5 / -4) Down
824 posts | reg. Jun 28, 2010
jep123Ars Scholae Palatinaereplya day ago
Quote:
Vultur uses a real implementation of the VNC screen-sharing application to mirror the screen of the infected device to an attacker-controlled server, researchers with ThreatFabric said.
(emphasis added)
I wonder if this got telephoned from "uses RealVNC" to "a real implementation of the VNC". Otherwise, I don't really understand what a "real implementation" is.
Up +11 (+11 / 0) Down
965 posts | reg. Mar 12, 2012
sprockketsArs Legatus Legionisreplya day ago
JMTronicHobbyist wrote:
show nested quotes
This way they can perform fraudulent transactions using the targeted phone instead of their own equipment. It's in the article. And most password entry on my phone shows each character as you type even though you don't see the entire password.
Who in 2021 still types in passwords? I use my fingerprint - good luck forging that with vnc.
Up -7 (+3 / -10) Down
22018 posts | reg. Aug 13, 2005
jarvisArs Scholae Palatinaereplya day ago
malor wrote:
This is a lot of why I don't install apps anymore, beyond the absolute basics: my bank, Authy, and Steam, and that's it. And I'm not entirely sure about Authy.
Google is doing such an awful job of protecting against malware that their entire store is pretty much useless to me.
This is the new norm for me as well. I don't do social media so I don't really care about all that nonsense (I also get great battery life as a result). I only install apps from well known developers as well. Bank, Signal, Cisco VPN, Roku, Firefox Focus, everything else is a well known Google App or MS app. And a couple Squaresoft games (Gotta have Dragon Quest 1 - 6!). Anything remotely sketchy will never be installed.
Up +1 (+1 / 0) Down
1400 posts | reg. Jul 17, 2009
Dan GoodinSecurity Editorreplya day agoStory AuthorReader Fav
jipthevip wrote:
show nested quotes
People like to rag on the Play Store any time malicious apps are found but it seems like 99 times out of 100 these are crapware apps that you'd have to be braindead to download. I switched over to Android after the iPhone 3GS (first Galaxy, now Pixel) and after years of downloading/sideloading applications I've only ever ended up with one malicious app on my phone: a legitimate barcode scanner that was hijacked long after I'd downloaded it.
People need to take a little personal responsibility when it comes to these situations. Are the people blaming Google for "allowing" malware on the Play Store also just downloading heaps of malware off the internet since it isn't a curated experience? And I just don't accept the excuse of "not everyone is a tech person". Home computers have been common since the 80s, the first smartphone came out 14 years ago. People need to learn to live in the 21st century instead of blaming the tech for their own ineptitude.
Do you have any friends or family members who are elderly, teens or have developmental disabilities? There are a lot of good reasons why not everyone can be as savvy a phone user as you think you are.
Google is hosting these apps and pushing people to use Play, so Google has a responsibility to keep it free of these kinds of threats. I guarantee you that if Play malware ate into Google's profits, the company would roll out a solution in a single quarter.
Yes, becoming tech literate is something every individual should strive for. Have you considered volunteering to teach tech literacy in your community instead of passing judgements in online forums?
Up +32 (+36 / -4) Down
1323 posts | reg. Jan 30, 2012
jipthevipSmack-Fu Master, in trainingreplya day ago
dangoodin wrote:
show nested quotes
Do you have any friends or family members who are elderly, teens or have developmental disabilities? There are a lot of good reasons why not everyone can be as savvy a phone user as you think you are.
Google is hosting these apps and pushing people to use Play, so Google has a responsibility to keep it free of these kinds of threats. I guarantee you that if Play malware ate into Google's profits, the company would roll out a solution in a single quarter.
Yes, becoming tech literate is something every individual should strive for. Have you considered volunteering to teach tech literacy in your community instead of passing judgements in online forums?
I actually do teach tech classes and have for the past 6 years. These are bare basic principles that I've been able to teach to children. The elderly have been around since the inception of computers and only have their stubbornness to blame. Children and teens are given technology at a young age and should be taught either by their parents or their school. I don't really have an answer for the developmentally disabled other than that a trusted person (relative, care provider, etc) set up some sort of parental control to lock down the phone. Technical literacy is not just something everyone should strive for, it is simply no longer optional in this day and age.
Up -10 (+10 / -20) Down
13 posts | reg. Jul 29, 2020
halarsWise, Aged Ars Veteranreplya day ago
Does any bank still allow non-MFA login?
Up 0 (+1 / -1) Down
138 posts | reg. Feb 3, 2016
Dan GoodinSecurity Editorreplya day agoStory AuthorReader Fav
jipthevip wrote:
show nested quotes
I actually do teach tech classes and have for the past 6 years. These are bare basic principles that I've been able to teach to children. The elderly have been around since the inception of computers and only have their stubbornness to blame. Children and teens are given technology at a young age and should be taught either by their parents or their school. I don't really have an answer for the developmentally disabled other than that a trusted person (relative, care provider, etc) set up some sort of parental control to lock down the phone. Technical literacy is not just something everyone should strive for, it is simply no longer optional in this day and age.
Several people in my family had diminished capacity in their later years. My dad, for instance, was a member of Mensa and would clean up when watching Jeopardy, but in his last days, he struggled to do even simple things like make a sandwich. He was absolutely mortified when he fell for a tech support scam. I had him using Chrome on macOS, and talked to him often about security, but he just didn't have the sharpness he once had, and it showed when he went online.
Similarly, teens often have absent parents or parents who themselves aren't tech literate. With the poor funding of so much public education, expecting schools to teach tech literacy is unrealistic, at least for the foreseeable future. And as you admit, you have no answer for the millions of people with Autism, cognitive disabilities, and similar conditions.
I'm glad to hear you have been teaching tech literacy for the past 6 years. I only wish you understood that there are all kinds of legitimate reasons not everyone is as tech savvy as you think you are. I could do away with the judgements you're passing, the victims you're shaming and the free pass you're giving Google.
Up +34 (+37 / -3) Down
1323 posts | reg. Jan 30, 2012
train_wreckArs Centurionreplya day agoReader Fav
dangoodin wrote:
show nested quotes
Several people in my family had diminished capacity in their later years. My dad, for instance, was a member of Mensa and would clean up when watching Jeopardy, but in his last days, he struggled to do even simple things like make a sandwich. He was absolutely mortified when he fell for a tech support scam. I had him using Chrome on macOS, and talked to him often about security, but he just didn't have the sharpness he once had, and it showed when he went online.
Similarly, teens often have absent parents or parents who themselves aren't tech literate. With the poor funding of so much public education, expecting schools to teach tech literacy is unrealistic, at least for the foreseeable future. And as you admit, you have no answer for the millions of people with Autism, cognitive disabilities, and similar conditions.
I'm glad to hear you have been teaching tech literacy for the past 6 years. I only wish you understood that there are all kinds of legitimate reasons not everyone is as tech savvy as you think you are. I could do away with the judgements you're passing, the victims you're shaming and the free pass you're giving Google.
My girlfriend is five years younger than me, squarely Gen Z. She got swindled by scammers who sysksy’d her computer (it was actually how we met, she brought her computer to the shop i was working at. How romantic!) Just because people grew up with computers doesn’t automatically mean they have any level of literacy. Education is important for everyone.
Up +25 (+26 / -1) Down
207 posts | reg. Jul 10, 2018
lasertekkSmack-Fu Master, in trainingreplya day ago
Rick C. wrote:
They never created apps for convenience. They were created for marketing purposes to collect user data for targeted advertising. The security issues were seeing are the new icing on the cake. I’ve wiped all apps that use a credit card and go directly to the website, even Amazon.
It was Facebook that was shown to copy your contacts lists, but through the app only, not the website.
Up +7 (+7 / 0) Down
48 posts | reg. May 10, 2021
jipthevipSmack-Fu Master, in traininga day ago
dangoodin wrote:
show nested quotes
Several people in my family had diminished capacity in their later years. My dad, for instance, was a member of Mensa and would clean up when watching Jeopardy, but in his last days, he struggled to do even simple things like make a sandwich. He was absolutely mortified when he fell for a tech support scam. I had him using Chrome on macOS, and talked to him often about security, but he just didn't have the sharpness he once had, and it showed when he went online.
Similarly, teens often have absent parents or parents who themselves aren't tech literate. With the poor funding of so much public education, expecting schools to teach tech literacy is unrealistic, at least for the foreseeable future. And as you admit, you have no answer for the millions of people with Autism, cognitive disabilities, and similar conditions.
I'm glad to hear you have been teaching tech literacy for the past 6 years. I only wish you understood that there are all kinds of legitimate reasons not everyone is as tech savvy as you think you are. I could do away with the judgements you're passing, the victims you're shaming and the free pass you're giving Google.
And I could do away with your presumptions, anecdotes, and the free pass you're giving every user out there. (Btw I did address your point about mentally deficient individuals but thanks for ignoring that.)
Up -18 (+4 / -22) Down
13 posts | reg. Jul 29, 2020
ukeandhikeWise, Aged Ars Veteranet Subscriptorreplya day ago
In before someone says somehow cryptocurrency is the answer here lol
I’ve moved all of my banking out of apps and to a browser for this reason as others have mentioned… if the bank were still more accessible in person I’d go wholly back to in-person (thanks COVID).
And as someone upthread mentioned, I’m all about cash wherever possible too.
Up +4 (+6 / -2) Down
423 posts | reg. Sep 11, 2020
Dan GoodinSecurity Editorreplya day agoStory AuthorReader Fav
jipthevip wrote:
show nested quotes
And I could do away with your presumptions, anecdotes, and the free pass you're giving every user out there. (Btw I did address your point about mentally deficient individuals but thanks for ignoring that.)
Quote:
I don't really have an answer for the developmentally disabled other than that a trusted person (relative, care provider, etc) set up some sort of parental control to lock down the phone.
Before I send you on your way, I'll just point out that, as you readily admit, that's not much of an answer at all (so no, I didn't ignore it). I think it's sad that you're harder on individuals, many who face challenges posed by disabilities, poverty and other hardships, than you are on one of the world's largest companies with more than enough resources to fix this problem. Good day, sir.
Up +25 (+27 / -2) Down
1323 posts | reg. Jan 30, 2012
PeterWimseyArs Tribunus Militumreplya day ago
dangoodin wrote:
show nested quotes
Do you have any friends or family members who are elderly, teens or have developmental disabilities? There are a lot of good reasons why not everyone can be as savvy a phone user as you think you are.
Google is hosting these apps and pushing people to use Play, so Google has a responsibility to keep it free of these kinds of threats. I guarantee you that if Play malware ate into Google's profits, the company would roll out a solution in a single quarter.
Yes, becoming tech literate is something every individual should strive for. Have you considered volunteering to teach tech literacy in your community instead of passing judgements in online forums?
It's not even that; there was a study a couple of years ago that showed that millennials were 6 times more likely than the elderly to fall for an online scam.
Not because the elderly are tech savvy, but because they are generally much more reluctant to do anything involving money online in the first place. If you won't use a legitimate banking app, you won't be installing and using a fake banking app either.
But of course they don't fall for the same scams; no self respecting millennial will fall for the "grandma I'm in jail" scam or the "IRS will arrest you unless you pay $2000 in Amazon gift cards" scam.
Instead, millennials fall for employment related advance payment scams and the like...and because so much job searching occurs online (but not by retired people), millennials are just much more exposed.
Up +23 (+23 / 0) Down
1621 posts | reg. Jul 11, 2010
KeyboardWeebArs Scholae Palatinaeet Subscriptorreplya day ago
dangoodin wrote:
show nested quotes
Several people in my family had diminished capacity in their later years. My dad, for instance, was a member of Mensa and would clean up when watching Jeopardy, but in his last days, he struggled to do even simple things like make a sandwich. He was absolutely mortified when he fell for a tech support scam. I had him using Chrome on macOS, and talked to him often about security, but he just didn't have the sharpness he once had, and it showed when he went online.
Similarly, teens often have absent parents or parents who themselves aren't tech literate. With the poor funding of so much public education, expecting schools to teach tech literacy is unrealistic, at least for the foreseeable future. And as you admit, you have no answer for the millions of people with Autism, cognitive disabilities, and similar conditions.
I'm glad to hear you have been teaching tech literacy for the past 6 years. I only wish you understood that there are all kinds of legitimate reasons not everyone is as tech savvy as you think you are. I could do away with the judgements you're passing, the victims you're shaming and the free pass you're giving Google.
My grandfather is a smart man who, in my opinion, exhibits much of the ingenuity, know-how, and can-do spirit that American Exceptionalists romanticize. He's handy at all sorts of things, he crafts and modifies his own tools--often collecting what some might call junk in order to take it apart and reassemble into something useful. Given a computer, he quickly learned to manage his finances with it, and voice chat with folks around the world who hardly believed when he said he was 81.
Well, he used to be, anyway. He's not 81 anymore. He's declined quite noticeably. He's much slower now than he used to be. I don't think he uses his computer anymore.
Getting old is rough.
Up +21 (+21 / 0) Down
1569 posts | reg. Sep 28, 2016
MrTomArs Scholae Palatinaereplya day ago
sprockkets wrote:
show nested quotes
Who in 2021 still types in passwords? I use my fingerprint - good luck forging that with vnc.
Exactly. Best invention since sliced spaghetti. One tap to open, one tap to login.
Granite OctopusSeniorius Lurkiuset Subscriptorreplya day ago
malor wrote:
This is a lot of why I don't install apps anymore, beyond the absolute basics: my bank, Authy, and Steam, and that's it. And I'm not entirely sure about Authy.
Google is doing such an awful job of protecting against malware that their entire store is pretty much useless to me.
I’m asking genuinely here and not trying to be snarky - why not switch to iPhone at this point? If it’s got to the point you aren’t using third party apps, does android offer any benefits over iOS any longer? Not saying malware doesn’t exist on iOS but the scope for apps to do this kind of thing is greatly diminished. Or do you consider the threat model largely the same?
Post a Comment