{"id":6921,"date":"2017-01-10T14:20:40","date_gmt":"2017-01-10T19:20:40","guid":{"rendered":"https:\/\/www.psafe.com\/en\/blog\/?p=6921"},"modified":"2017-01-18T09:20:42","modified_gmt":"2017-01-18T14:20:42","slug":"android-banking-malware-disguises-super-mario-run","status":"publish","type":"post","link":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/","title":{"rendered":"Malware Disguises Itself as Super Mario Run"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">Android users and game enthusiasts, beware: cyber criminals are disguising Trojan malware as the much beloved and popular <\/span><b>Super Mario Run<\/b><span style=\"font-weight: 400;\"> game, putting users\u2019 banking, credit cards, and social media apps at risk of being hacked. Much like past attempts to install <\/span><span style=\"font-weight: 400;\">information-stealing malware on devices prior to the release of Pokemon Go, this most recent attack targets <\/span><span style=\"font-weight: 400;\">Android users looking to download the popular Super Mario Run game on their Android devices from third-party sites. For that reason, we recommend you download apps only from the official Google Play store and click below immediately to scan your device for malware.<\/span><\/p>\n<p><center><a href=\"psafe:\/\/launch\/antivirus_quick\" rel=\"attachment wp-att-4696\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-4696\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2016\/07\/BOTAO_EN_AV-1-300x78.png\" alt=\"Run Virus Scan\" width=\"300\" height=\"78\" \/><\/a><\/center><span style=\"font-weight: 400;\">The Marcher malware works by posing either as a firmware update for Android users, prompting them to enter sensitive bank details in a fake login page for online banking, or, as utilized by this most recent attack, as ad promotions on various websites prompting Android users to \u201cdownload\u201d Super Mario Run. <\/span><\/p>\n<p>Once downloaded, the malicious app prompts users to submit credit card information in an overlay page, then claims various permissions, including access as an administrator for the device. When the malware has permission over the device, it can then steal log-in data from your banking apps, such as credit card information and routing numbers, and other apps containing sensitive personal information. The hackers can also access apps such as Facebook, WhatsApp, Skype, Gmail, and the Google Play store to carry out additional fraud.<\/p>\n<p>PSafe\u2019s security team alerts that Android gamers can only download Super Mario Run on the official Google Play store. &#8220;To keep your data safe from hackers, it\u2019s important to avoid downloading apps from unofficial sources and use an effective antivirus app. DFNDR, for example, regularly scans the cellphone, preventing from hacking&#8221; says Emilio Simoni, security manager at PSafe.<\/p>\n<p><span style=\"font-weight: 400;\">Nintendo released the Super Mario Run mobile game for iOS device, it but didn\u2019t make it available for Android. The game earned instant success when it was downloaded over 40 mi<\/span><span style=\"font-weight: 400;\">llion times<\/span><span style=\"font-weight: 400;\"> within the first four days of its release on Apple iOS, and is likely to be popular on the Google Play store as well.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Be sure to stay clear of firmware updates and third-party sites promising to deliver games that are not yet available on Google Play.<\/p>\n","protected":false},"author":83,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[4177,4180],"class_list":["post-6921","post","type-post","status-publish","format-standard","hentry","category-security","tag-banking-malware","tag-super-mario-run"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Android Banking Malware Disguises Itself as Super Mario Run<\/title>\n<meta name=\"description\" content=\"Be sure to stay clear of firmware updates and third-party sites promising to deliver games that are not yet available on Google Play.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Android Banking Malware Disguises Itself as Super Mario Run\" \/>\n<meta property=\"og:description\" content=\"Be sure to stay clear of firmware updates and third-party sites promising to deliver games that are not yet available on Google Play.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/\" \/>\n<meta property=\"og:site_name\" content=\"PSafe Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-01-10T19:20:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2017-01-18T14:20:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2016\/07\/BOTAO_EN_AV-1-300x78.png\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"78\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"PSafe Newsroom\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/\"},\"author\":{\"name\":\"PSafe Newsroom\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#\\\/schema\\\/person\\\/1c3c9cd7f8f7ff5b8e8071d39226b99d\"},\"headline\":\"Malware Disguises Itself as Super Mario Run\",\"datePublished\":\"2017-01-10T19:20:40+00:00\",\"dateModified\":\"2017-01-18T14:20:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/\"},\"wordCount\":359,\"image\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/wp-content\\\/uploads\\\/2016\\\/07\\\/BOTAO_EN_AV-1-300x78.png\",\"keywords\":[\"Banking Malware\",\"Super Mario Run\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/\",\"url\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/\",\"name\":\"Android Banking Malware Disguises Itself as Super Mario Run\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/wp-content\\\/uploads\\\/2016\\\/07\\\/BOTAO_EN_AV-1-300x78.png\",\"datePublished\":\"2017-01-10T19:20:40+00:00\",\"dateModified\":\"2017-01-18T14:20:42+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#\\\/schema\\\/person\\\/1c3c9cd7f8f7ff5b8e8071d39226b99d\"},\"description\":\"Be sure to stay clear of firmware updates and third-party sites promising to deliver games that are not yet available on Google Play.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/wp-content\\\/uploads\\\/2016\\\/07\\\/BOTAO_EN_AV-1-300x78.png\",\"contentUrl\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/wp-content\\\/uploads\\\/2016\\\/07\\\/BOTAO_EN_AV-1-300x78.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/android-banking-malware-disguises-super-mario-run\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Malware Disguises Itself as Super Mario Run\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/\",\"name\":\"PSafe Blog\",\"description\":\"Articles and news about Mobile Security, Android, Apps, Social Media and Technology in general.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/#\\\/schema\\\/person\\\/1c3c9cd7f8f7ff5b8e8071d39226b99d\",\"name\":\"PSafe Newsroom\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g\",\"caption\":\"PSafe Newsroom\"},\"description\":\"The dfndr blog is an informative channel that presents exclusive content on security and privacy in the mobile and business world, with tips to keep users protected. Populated by a select group of expert reporters, the channel has a partnership with dfndr lab's security team. Together they bring you, first-notice news about attacks, scams, internet vulnerabilities, malware and everything affecting cybersecurity.\",\"url\":\"https:\\\/\\\/www.psafe.com\\\/en\\\/blog\\\/author\\\/newsroom-psafe\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Android Banking Malware Disguises Itself as Super Mario Run","description":"Be sure to stay clear of firmware updates and third-party sites promising to deliver games that are not yet available on Google Play.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/","og_locale":"en_US","og_type":"article","og_title":"Android Banking Malware Disguises Itself as Super Mario Run","og_description":"Be sure to stay clear of firmware updates and third-party sites promising to deliver games that are not yet available on Google Play.","og_url":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/","og_site_name":"PSafe Blog","article_published_time":"2017-01-10T19:20:40+00:00","article_modified_time":"2017-01-18T14:20:42+00:00","og_image":[{"width":300,"height":78,"url":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2016\/07\/BOTAO_EN_AV-1-300x78.png","type":"image\/png"}],"author":"PSafe Newsroom","twitter_misc":{"Written by":false,"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/#article","isPartOf":{"@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/"},"author":{"name":"PSafe Newsroom","@id":"https:\/\/www.psafe.com\/en\/blog\/#\/schema\/person\/1c3c9cd7f8f7ff5b8e8071d39226b99d"},"headline":"Malware Disguises Itself as Super Mario Run","datePublished":"2017-01-10T19:20:40+00:00","dateModified":"2017-01-18T14:20:42+00:00","mainEntityOfPage":{"@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/"},"wordCount":359,"image":{"@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/#primaryimage"},"thumbnailUrl":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2016\/07\/BOTAO_EN_AV-1-300x78.png","keywords":["Banking Malware","Super Mario Run"],"articleSection":["Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/","url":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/","name":"Android Banking Malware Disguises Itself as Super Mario Run","isPartOf":{"@id":"https:\/\/www.psafe.com\/en\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/#primaryimage"},"image":{"@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/#primaryimage"},"thumbnailUrl":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2016\/07\/BOTAO_EN_AV-1-300x78.png","datePublished":"2017-01-10T19:20:40+00:00","dateModified":"2017-01-18T14:20:42+00:00","author":{"@id":"https:\/\/www.psafe.com\/en\/blog\/#\/schema\/person\/1c3c9cd7f8f7ff5b8e8071d39226b99d"},"description":"Be sure to stay clear of firmware updates and third-party sites promising to deliver games that are not yet available on Google Play.","breadcrumb":{"@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/#primaryimage","url":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2016\/07\/BOTAO_EN_AV-1-300x78.png","contentUrl":"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2016\/07\/BOTAO_EN_AV-1-300x78.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.psafe.com\/en\/blog\/android-banking-malware-disguises-super-mario-run\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/www.psafe.com\/en\/blog\/"},{"@type":"ListItem","position":2,"name":"Malware Disguises Itself as Super Mario Run"}]},{"@type":"WebSite","@id":"https:\/\/www.psafe.com\/en\/blog\/#website","url":"https:\/\/www.psafe.com\/en\/blog\/","name":"PSafe Blog","description":"Articles and news about Mobile Security, Android, Apps, Social Media and Technology in general.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.psafe.com\/en\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.psafe.com\/en\/blog\/#\/schema\/person\/1c3c9cd7f8f7ff5b8e8071d39226b99d","name":"PSafe Newsroom","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0ce470a17403045075d8cd48a742ebd97c085f6d510cfd605fb223ba3fad770b?s=96&d=mm&r=g","caption":"PSafe Newsroom"},"description":"The dfndr blog is an informative channel that presents exclusive content on security and privacy in the mobile and business world, with tips to keep users protected. Populated by a select group of expert reporters, the channel has a partnership with dfndr lab's security team. Together they bring you, first-notice news about attacks, scams, internet vulnerabilities, malware and everything affecting cybersecurity.","url":"https:\/\/www.psafe.com\/en\/blog\/author\/newsroom-psafe\/"}]}},"_links":{"self":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/6921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/comments?post=6921"}],"version-history":[{"count":0,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/6921\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/media?parent=6921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/categories?post=6921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/tags?post=6921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}