SMARTPHONE owners are being warned about hackers targeting biometric data to steal their money.
Cybersecurity firm Group-IB has warned of criminals stealing biometric data such as facial recognition.
1
Criminals have been doing this to gain access to users’ phones, which can contain anything from private photos to bank account information.
Group-IB said in a new report that it has discovered the first banking trojan that steals people’s faces.
HOW DOES THE TROJAN WORK?
A Trojan is any malicious software that misleads users by masquerading as a standard program
This specific Trojan, once installed, can capture the victim’s face via their webcam.
It can then use deepfake technology to generate realistic-looking videos.
These fake videos can be used to bypass facial recognition security systems.
In return, attackers are allowed access to sensitive financial data and accounts.
The method was allegedly developed by a hacking family based in China and was used in Vietnam earlier this month.
These hackers “have introduced a new category of malware families that specialize in collecting facial recognition data,” Sharmine Low, a malware analyst in Group-IB’s Asia-Pacific threat intelligence team, wrote in a blog post.
“They have also developed a tool that facilitates direct communication between victims and cybercriminals posing as legitimate banking call centers.”
The report highlights an alarming rise in face-swapping attacks, with a staggering 704% rise seen since 2023.
This increase highlights the increasing vulnerability of biometric authentication systems, which were previously considered to be among the most secure.
HOW TO STAY SAFE
Below are some tips to help you protect yourself from these types of attacks:
- Be careful about the information you share online, especially facial recognition information.
- Use strong passwords and enable two-factor authentication whenever possible.
- Be careful about clicking on links or opening attachments in emails from unknown senders.
- Update your software regularly, including your operating system, web browser, and security software.