New Malware Threatens Android Users in Iowa, Illinois, & Wisconsin: Could Empty Your Bank Account

Residents of Iowa, Illinois, and Wisconsin need to be aware of a new and particularly dangerous malware targeting Android phones. This malware, known as BingoMod, can steal money from your accounts and then wipe your phone clean. It can swipe up to $16,000 in one go using on-device fraud techniques. What's even more concerning is that BingoMod is still in development, with its creators continuously adding more features to evade detection.

BingoMod is a type of malware known as a remote access trojan, or RAT, which allows attackers to gain full remote access to infected devices. It typically spreads through smishing campaigns, where users receive fraudulent SMS messages prompting them to download what appears to be a legitimate app. These malicious apps often masquerade as antivirus applications. In some cases, they even imitate legitimate tools like the free AVG Antivirus & Security app available on Google Play.

Once installed, BingoMod prompts users to activate Accessibility Services, which grants the malware extensive permissions. When granted, it can log your keystrokes to steal sensitive information like login credentials, account balances, and can intercept messages to capture one-time passwords or authentication codes. Additionally, the malware can block you from changing system settings, blocks certain apps, and can even uninstall apps to prevent its removal. To cover its tracks, attackers can even wipe the infected device after executing their dastardly plan.

However, there are several steps you can take to protect your device and data. First, be cautious of phishing attempts by avoiding suspicious links or providing sensitive information in response to messages or emails from unknown sources. Use strong antivirus software on all devices to provide comprehensive protection against malware. Download apps only from trusted sources like the Google Play Store and avoid apps from unknown websites or unofficial stores. Consider using identity theft protection services that monitor personal information and alert you to suspicious activity. Always review app permissions before installation and avoid granting unnecessary permissions, especially those related to Accessibility Services.

Regularly review your bank and credit card statements for unauthorized transactions and report any suspicious activity immediately. Enable SMS notifications for your bank accounts to receive instant alerts for any unauthorized transactions. Set up two-way or dual authentication for an extra layer of security on your accounts. Use strong, unique passwords, and consider using a password manager to create and store them. Keep your device’s operating system and apps updated to ensure you have the latest security patches. When accessing sensitive information or conducting financial transactions, use a secure, private connection instead of public Wi-Fi.

Get our free mobile app

Additionally, watch for unusual behaviors on your phone, such as unexpected requests for permissions or changes in settings you didn’t make. If an app requests to enable Accessibility Services without a clear need, this should be taken as a red flag. If you suspect your device is infected with BingoMod, immediately disconnect from the internet to prevent further data transmission. Manually uninstall any suspicious apps and consider performing a factory reset if the malware persists. Afterward, change the passwords for your online accounts using a secure device.

By staying vigilant and taking proactive steps, residents of the Tri-States can significantly reduce the risk of being affected by BingoMod or similar future malware versions and updates.