From gbhackers.com
Researchers discovered a new Android Malware called “BasBanke” targeting Brazilian users to steals financial related sensitive data such as credentials and credit/debit card numbers.
BasBanke Malware continuously infects users since 2018 Brazilian elections using various malicious apps that downloaded over 10,000 times from Google Play Store till the date.
Malware authors abusing Facebook and WhatsApp social media adverting to trick users into downloading the malware and perform various other attacks includes keystroke logging, screen recording, SMS interception.
Advertising campaign URL either pointed to the official Google Play Store or another website where attackers trick users to malicious APK.
In this case, A malicious app called CleanDroid is one of the widespread malicious apps which is advertising on Facebook and pointed the download link into Google Play store.