Application steals account in a blink, need to remove immediately

Once an application becomes popular and users rush to download and install it, bad guys take advantage of the opportunity to upload fake apps . They look very similar on the outside, but in fact, inside are malicious codes that can cause users to lose their accounts.

In the context of increasingly sophisticated cyber attacks, Kienlong Commercial Joint Stock Bank (KienlongBank) has just issued an urgent warning about an extremely dangerous new trick: Installing malware into fake AI chatbot applications to steal bank accounts of smartphone users.

A fake Deepseek website entices users to download an application containing malicious code. Photo: Tue Minh

Fake AI chatbot contains malicious code, extremely sophisticated camouflage

According to information from the KienlongBank website, a dangerous variant of the Banking Trojan family named OctoV2 is spreading rapidly, mainly through fake websites.

Notably, this malware is hiding under the guise of a fake Deepseek application - introduced as a smart AI chatbot, making it easy for users to lose their guard.

Next is OctoV2, which is able to bypass security layers by disguising itself as a system update software or phone support tool.

Octo v2 has become one of the top 5 security hotspots in Europe recently.

Once installed, the malware immediately performs a series of dangerous actions: stealing messages, contacts, data from banking and social networking applications, and can even collect OTP codes in financial transactions.

REMOTE CONTROL

Not only stealing data, OctoV2 also takes control of the device remotely, recording user screen operations. This makes it easy for criminals to infiltrate bank accounts and make transactions without the user knowing.

In many cases, the damage does not stop at losing money but also entails the risk of serious personal information disclosure. In the face of the increasingly widespread danger, KienlongBank recommends that customers absolutely do not download applications from unofficial sources, especially strange links shared via text messages or social networks.

RECHARGE KNOWLEDGE TO PROTECT YOUR PHONE

To prevent the risk of being attacked by fake apps and having personal data stolen, users should equip themselves with the following preventive knowledge:

- Activate Google Play Protect to enhance the protection of your phone. - Check and limit app access, especially accessibility permissions.

- Only grant permissions to applications from known, trusted sources.

- Install reputable anti-virus software and update to the latest version regularly.

If the device shows signs of abnormality such as running slowly, overheating, or strange applications appearing, the user should immediately:

- Change all passwords for important banking applications and services.

- Disconnect from the internet and check for unusual access rights.

- Call KienlongBank hotline 1900 6929 for timely support.

In addition to protecting themselves, KienlongBank also calls on the user community to proactively share warning information with relatives and friends to raise vigilance.

If you detect any suspicious signs, you should immediately report to the nearest police station for coordination. In the digital age with many conveniences that come with risks, raising awareness and equipping yourself with cybersecurity knowledge is of utmost importance.

KienlongBank hopes that with the initiative and vigilance of each individual, the community will together create a safer digital environment, minimizing damage from increasingly sophisticated attacks.