The hacker gang also launches attacks embedded in fake ads which promise free Netflix codes and Google AdWords coupons. When a victim engages with the ad, the app requests they log in with a Facebook account to claim the free codes or coupons. Then they learn that the offer has “expired”.
The victim/user has fallen to a phishing campaign. And stolen Facebook data using Javascript injection. This method works on login pages. And enables FlyTrap to steal access to all your personal data.
FlyTrap spreads quickly to multiple users through what looks like legitimate links and apps.
While the malware is mostly being used to steal personal data at the moment, it could also be employed in more nefarious ways, such as to facilitate a large-scale ransomware deployment.
How to keep yourself safe from FlyTrap
When zLabs notified Google about FlyTrap they removed the malicious apps from the Play Store. Those apps are no longer active on any devices that installed them. But they are believed to still be active on third-party websites.
