This 'fake' Google Chrome update may target bank accounts on Android phones

Google Chrome

While some internet viruses or malware are easier to recognise than others, the most subtle might be particularly difficult to identify. Another example of such malware was discovered by cybersecurity firm ThreatFabric, which deceitfully poses as an update for Google Chrome on Android smartphones.

ThreatFabric has dubbed this series of malware as Brokewell, and it has a spoof Google Chrome update page that lets you download a fake Chrome update. But, once installed on the phone, it steals all the personal data on the Android device, and can even spy on banking apps.

In a statement shared with PhoneArena on the trojan virus, Google stated: “Android users are automatically protected against known versions of this malware by Google Play Protect, which is on by default on Android devices with Google Play Services. Google Play Protect can warn users or block apps known to exhibit malicious behaviour, even when those apps come from sources outside of Play.”

An Android smartphone user can be duped into installing the Brokewell virus, which claims to update the Google Chrome browser on their device as it does look authentic, claims the report. It then places an impostor screen over any smartphone app, including banking apps, to get login credentials, such as the user's username and password.

This data is then sent to the hacker’s remote server, which essentially makes all the data vulnerable on your device. Once the malware steals the phone user's credentials, it can steal all the data or swipe the money from users’ bank accounts.

Android users must always update any app on their smartphones from the Google Play Store only, and ignore any such third-party app updates or installations.