Hi Guys,

I hope you are well and having a great start to your week.

Security researchers from Cleafy have detected a new piece of malware that is capable of not only stealing your banking login information and tracking your location but can also completely wipe your device. Also, once infected, the Malware continuously monitors the victim’s bank application through remote access tools and key-logging techniques to create unauthorized bank transfers from the victim’s account.

The MalwareMalware is called BRATA, and I am sorry to say that at the moment, this Malware is capable of hiding itself from Virus and Malware scanners. We are currently working on detecting and removing it, and as soon as we have figured it out, we will let you know.

Until we have a solution, please follow these steps:

  • Only ever install apps from the Google Play Store, and before you install, check how many reviews the app has. (This is the most important thing to do)
  • Never install an app from a website that you do not trust. You can use Incognito Website Checker, and we will tell you if it is safe or not.
  • During installation, pay attention to the requested permissions and do not grant any permissions that appear unnecessary for the app’s core functionality.
  • You can also use Incognito’s App Check tool to check what permissions an installed app already has on your device. If you use this feature, you will be stunned by some of the permissions your installed apps already have. I suggest you use this tool to check what apps have what permissions on your device. Does a torchlight app need to be able to make phone calls etc.?
  • Keep an eye on battery consumption; if your device goes dead fast, it is a clear sign go malware infection
  • Also, keep an eye on network traffic volumes to identify any spikes as this can be a sign of malicious processes running in the background.

Please let me know if you need any more information, and please also share this tip with family, friends, and work colleagues.

All the best,

Max Roberts,
Incognito Privacy Care team.