That Android version of Clubhouse? It is probably malware.


Image: Shutterstock / Asia Evtyshok

PCMag.com is a leading technology authority, delivering Labs-based independent reviews of the latest products and services. Our industry analysis and expert practical solutions will help you make better purchasing decisions and get the most out of technology.

No, Clubhouse is not yet available for Android. But in the meantime, hackers are trying to take advantage of its popularity by releasing malware questioned as an Android version of the audio chat app.

The antivirus provider ESET saw the Trojan program. Joinclubhouse’s fake clubhouse website[.]mobi ”has been circulating the dangerous app over the internet. The site itself looks similar to the real Clubhouse website, but it says it offers an Android version of the app from the Google Play Store. However, if you download it, the Trojanized program will try to steal your logins from 458 online services, including social media platforms, cryptocurrency exchanges, and banking apps.

Although the fake website claims to offer the Clubhouse app from the Google Play Store, it delivers the program through its own server – a famous red flag. Once installed, the Trojan will then try to steal passwords by generating a fake login window across the apps you open, such as Facebook, Twitter, on Netflix. The popup window then records what you type, and sends your passwords to the hacker’s server.

“Using SMS-based two-factor authentication (2FA) to help prevent anyone from logging in to accounts would not be helpful in this case, as the Malware also sent text messages, ”said ESET. “The malicious app also requires the victim to enable access services, effectively allowing criminals to take control of the device. ”

It is true that Clubhouse is running on Android version of the app. But it may not come for a few more months. Expected to be released on the company’s official website and through the Google Play Store. As for the false “joinclubhouse”[.]mobi website ”, it currently triggers a malware warning if you try to visit the Chrome browser.

This article was originally published at PCMag here

Source