K7 Threat Control Lab has provided a threat advisory on the recently reported ‘Android Banking Trojan‘, which incidentally is not as recent as it is presumed to be. A storm in a tea cup indeed. The ‘Android Banking Trojan’ also referred as Bankbots, targeting banking applications is nothing new.  It has been seen in the mobile malware world for quite some time now.

K7 Threat Control Lab has also emphasized that none of the banking apps that have been named are compromised, nor are they at some super high risk. However it is strongly advised that users ensure that a robust and up-to-date security software is installed on their phone before they use any banking app.

Analyzing this banking Trojan reveals that it still avails of the usual social engineering technique of masquerading itself as a Flash Player app to trick the user into downloading and installing it. As expected this malware is only available on third party markets of low reputation.

Further analysis reveals that the ‘Android Banking Trojan’ originated in Russia, and seeks out not only Indian banking applications, but also banking apps from other parts of the world, based on their geo-location.

Users must always be aware that apps like PDF readers, Flash Players or any document-related apps would never require device administrator privileges, nor would they usually request for permissions to ‘Send or Write or Receive SMS’ since these are not required for their functionality. In contrast, this Android Banking Trojan requests such out-of-context permissions from the user which should be considered very suspicious.

Precautionary Measures

K7 Computing recommends:

• Installing a top-rated mobile security product such as K7 Mobile Security to block all kinds of infections
• Regularly updating the mobile OS and security application installed to stay clear of mobile malware
• Carefully analyzing the messages or alerts which are received before installing any app
• Never installing apps recommended by strangers
• Always preferring to download an app ONLY from the official Google Play store
• Never enabling Download from Unknown Sources
• Refraining from downloading applications that you do not need
• Always verifying the reputation of the application by checking the reviews available before downloading it

In addition K7 Threat Control Lab has also reported that Android Banking Trojan was blocked as soon as it was first spotted. The desired feature is already incorporated in the K7 Mobile Security product. K7 Mobile Security users are protected against this banking Trojan and its variants with the detection name, Trojan [0051c57a].

BookMyShow, India’s largest online entertainment ticketing platform, has been touted as one of the best apps of 2017 on both Google PlayStore and on Apple’s App Store. As per Google, BookMyShow was one of the most innovative apps this year, a title give to those which explored interactive new ways of budgeting time and money, helping others, and experiencing the world around them.

On Apple’s App Store, BookMyShow featured in their Best of 2017 list in its Trends of the Year section that featured App Store editors’ most download worthy games and apps globally based on topics and trends that were popular on the App store throughout the year. BookMyShow was recognized as an app which helps people get more done each day through time saving personal services that continue to evolve.

Rightly so, BookMyShow has moved beyond just an online entertainment ticketing platform and has completely transformed itself into an experience provider with options of booking tickets for sports, events and concerts or tuning into Jukebox – a platform to stream the latest music and podcasts.

BookMyShow, with its mobile first approach, continues to drive over 75% of total transactions through mobile [apps and mobile web]. In 2017, BookMyShow particularly focused on improving user experience on its platform. Some major visible innovations included roll out of Jukebox- BookMyShow’s audio entertainment service, becoming the first Indian entertainment ticketing player to be a part of WhatsApp for Business pilot wherein WhatsApp replaced SMS as a ticket confirmation channel and rolling out the app in additional vernacular languages taking the total regional language count to 8.

On the other hand, BookMyShow has been tirelessly working at the backend to make its app a lot more intelligent and intuitive. The app now recommends movies and events, basis a user’s purchase history, right at the top, along with preferred cinemas and show times. The interactions between a user and the app have also been made a lot simpler. They no longer have to toggle back and forth and can simply tap to choose between different show times, cinemas while booking for a movie. These minor yet extremely significant changes have improved performance by 2x on major booking screens such as homepage, show times, and seat layout.

On the non-movies front, BookMyShow continued to seamlessly handle thousands of booking requests at once for mega concerts like Ed Sheeran Live in Mumbai, tickets for which were sold out in a matter of 48 minutes! BookMyShow improved the post purchase experience of the users by engaging with them through video and audio content [Jukebox] hosted on BookMyShow. The discovery of experiences was also made easier with introduction of many new filters and improved search option.

Parikshit Dar, Director, BookMyShow said

At its heart, BookMyShow is a simple product that provides a simple solution to pertinent problems that users like you and I face related to entertainment experiences. In all our endeavours, we continue to identify and solve these problems to create an unmatched experience for our users. We are absolutely thrilled that our efforts this year have not just been loved by our users but also recognized by both Google and Apple.

Apple Best of 2017 can be found here. Google Play Best of 2017 can be found here

Truecaller have rolled out its newest update for Android 8.21 with interface changes for easier access to spam inbox. The new design will allow users to experience a  cleaner inbox and pay attention to the SMS that matter most with a spam tab segregating the unwanted messages.

Truecaller recently revealed through their Truecaller Insights Special Report, that India receives an overwhelming majority of spam calls. In its strive towards protecting its users from unwanted calls and potential fraud, Truecaller with its new interface is continuing its endeavour to ensure that users are better protected and more aware of incoming spam messages.

In this update, Truecaller has also included new app themes to match every user’s unique identity. This includes new colour combinations, which include colours like royal, coffee, grey, dark, and pitch black.

Other upgrades in version 8.21 include reoccurring pro subscriptions, flash messaging themes, mark all as read in block view and the ability to save MMS. The new update also gives the users an option to block & view profile on incoming flash.