for PCMag
No, Clubhouse is not yet available for Android. But in the meantime, hackers are trying to take advantage of its popularity by releasing malware questioned as an Android version of the audio chat app.
The antivirus provider ESET saw the Trojan program. Joinclubhouse’s fake clubhouse website[.]mobi ”has been circulating the dangerous app over the internet. The site itself looks similar to the real Clubhouse website, but it says it offers an Android version of the app from the Google Play Store. However, if you download it, the Trojanized program will try to steal your logins from 458 online services, including social media platforms, cryptocurrency exchanges, and banking apps.
Malicious web claims to offer #Clubhouse for Android releases Blackrock banking trojan. It attracts credentials from 458 apps – finance, cryptocurrency exchanges & wallets, social, IM and purchase apps. There is currently no official Clubhouse app for Android. #ESETresearch 1/2 pic.twitter.com/azlxjvIgNO
– ESET search (@ESETresearch) March 16, 2021
Although the fake website claims to offer the Clubhouse app from the Google Play Store, it delivers the program through its own server – a famous red flag. Once installed, the Trojan will then try to steal passwords by generating a fake login window across the apps you open, such as Facebook, Twitter, on Netflix. The popup window then records what you type, and sends your passwords to the hacker’s server.
“Using SMS-based two-factor authentication (2FA) to help prevent anyone from logging in to accounts would not be helpful in this case, as the Malware also sent text messages, ”said ESET. “The malicious app also requires the victim to enable access services, effectively allowing criminals to take control of the device. ”
It is true that Clubhouse is running on Android version of the app. But it may not come for a few more months. Expected to be released on the company’s official website and through the Google Play Store. As for the false “joinclubhouse”[.]mobi website ”, it currently triggers a malware warning if you try to visit the Chrome browser.
This article was originally published at PCMag here