This time the cybercriminals have turned their attention towards the users of taxi booking apps. According to the Kaspersky Lab researchers, the unknown group of hackers has realised a new version of the well-known mobile banking Faketoken Trojan.

The malware performs live tracking of apps and, when the user runs a specified app, overlays this with its phishing window to steal the bank card details of the victim. Moreover, the trojan can monitor and record the users’ calls, transmit the data to the command and control servers, and even steal the incoming SMS message, allowing the cybercriminals to get access to one-time verification passwords sent by a banks.

For now, the Faketoken trojan targets mostly the Russian Android users. However, the security experts are convinced that it won’t be long for the cybercriminals to extend their field of interest to other countries.

To protect themselves the Android users should never download and install any apps from unknown sources. The Kaspersky Lab researchers also recommend to use up-to-date internet security software, such as basic Kaspersky Internet Security for Android, which can be download from Google Play Store free of charge.