Android malware that has many faces, escaping detection

ESET researchers have discovered another banking trojan on Google Play – this time disguised as a Flashlight widget and targeting a potentially unlimited number of apps. Based on code that was primarily used for ransomware, the attackers are now trying their luck with phishing for banking credentials, ESET resaerchers said.

Android users were the target of another banking malware with screen locking capabilities, masquerading as a flashlight app on Google Play. Unlike other banking trojans with a static set of targeted banking apps, this trojan is able to dynamically adjust its functionality.

Aside from delivering promised flashlight functionality, the remotely controlled trojan comes with a variety of additional functions aimed at stealing victims’ banking credentials. Based on commands from its command and control (C&C) server, the trojan can display fake screens mimicking legitimate apps, lock infected devices to hide fraudulent activity, intercept SMS messages and display fake notifications in order to bypass two factor authentication.

The malware can affect all versions of Android. Because of its dynamic nature, there might be no limit to targeted apps – the malware obtains HTML code based on apps installed on the victim’s device and uses the code to overlay the apps with fake screens after they are launched. ESET researchers have seen fake screens for Commonwealth Bank, National Australia Bank and Westpac Mobile Banking, but also for Facebook, WhatsApp, Instagram and Google Play.

The trojan, detected by ESET as Trojan.Android/Charger.B, was uploaded to Google Play on March 30 and was installed by up to 5,000 unsuspecting users before being pulled from the store on ESET’s notice on April 10.

Those who have downloaded a flashlight app recently can check in Settings > Application Manager/Apps >  to see if they have the Flashlight Widget. The app cannot be uninstalled conventionally, but only if the device is first booted in Safe mode.

ESET advises users to stick to official app stores when downloading apps, and downloading apps which are popular going by the number of installs, ratings and review content. ESET also says that if an app asks for permissions that are unusual for its function – like device administrator rights for a Flashlight app – to rethink the download. Last but not least, use a reputable mobile security solution.

China heavily represented in Jones Lang LaSalle's new City Momentum Index

Dubai, Wuhan, Shanghai, Hong Kong and Singapore are in the top 10 for Jones Lang LaSalle's new and proprietary City Momentum Index (CMI). According to the company, highly dynamic cities demonstrate strong short term socio-economic and commercial real estate momentum and longer term foundations for success.

According to Jeremy Kelly, Director, Global Research for Jones Lang LaSalle: "City momentum is about far more than just raw GDP growth. The true foundation of highly dynamic cities emerges from such factors as speed of innovation and creation of cutting-edge businesses along with new building construction, property price movement and investment in real estate from cross-border investors and corporations.

"By focusing on the features of a city that are likely to underpin future performance, the CMI stands apart from the standard historic performance upon which most indices are based. It is such measures of dynamism in infrastructure, connectivity and innovation that we believe will be steering many investment and location decisions in the future, though investors and corporates should note that high momentum can pose both risk and opportunity."

GLOBAL TOP 20
1	San Francisco
2	London
3	Dubai
4	Shanghai
5	Wuhan
6	New York
7	Austin
8	Hong Kong
9	San Jose
10	Singapore
11	Shenzhen
12	Jakarta
13	Beijing
14	Chengdu
15	Los Angeles
16	Tianjin
17	Boston
18	Seattle
19	Tokyo
20	Lima

The top cities in Asia Pacific and the Middle East have these characteristics:

Elite cities that wield clear economic might on the global stage, accounting for one-quarter of the world's direct commercial real estate investment activity from 2012-2013:
Dubai (3), Hong Kong (8), Singapore (10) and Tokyo (19)
 
Rapidly urbanising cities in China that continue to grow with massive city-building programmes despite a slowing economy:
Shanghai (4), Wuhan (5), Shenzhen (11), Beijing (13), Chengdu (14) and Tianjin (16) 

Growth hotspots beyond the BRICs driven by urban consumerism:
Jakarta (12)
 
Resurgent cities gearing up for events in 2020 with renewed vigour:
Tokyo (19) – 2020 Summer Olympics and Dubai (3) – Expo 2020

*The City Momentum Index assesses 111 cities world-wide with a weighted overall score based on 34 short-term and longer term variables.

Short-term socio-economic momentum variables (40% of the model) include recent and projected changes in GDP and population, air passenger traffic, corporate headquarter presence and recent levels of foreign direct investment as a proportion of a city's economy.

Short-term commercial real estate momentum variables (30% of the model) include recent and projected percentage changes in office net absorption, office construction, office rents, shopping mall construction and retail rents, direct commercial real estate investment volumes and real estate transparency.

Longer term variables (30% of the model) that are likely to determine future economic strength and real estate momentum include high-value incubator indicators such as university presence and educational infrastructure, innovation capability and presence of technology and venture capital firms.