Hackers Deploying Virtual Android Phones To Bypass Bank Security, Empty Users’ Accounts: Cybersecurity Researchers

by

Hackers Deploying Virtual Android Phones To Bypass Bank Security, Empty Users’ Accounts: Cybersecurity Researchers

Fraudsters are increasingly using virtual phone numbers to bypass bank security measures and steal money from people’s accounts.

According to Malwarebytes researcher Pieter Arntz, criminals are renting inexpensive Android smartphones with internet access to get around bank security measures, as reported by the cybersecurity firm Group-IB.

Most cyberattacks begin with tricking people. Criminals often try to deceive users into giving away temporary passwords, authorizing logins, or sending money to what they claim is a secure account.

Criminals secretly access a cloud-based phone system that appears to be the victim’s device to their bank, using copied or realistic identifying information and mimicking normal usage patterns. Once inside, they initiate legitimate-looking payment transfers (often to accounts controlled by other criminals), which the bank’s security systems may not flag as suspicious because the device seems normal.

Once they have this access, thieves can drain your bank account or sell the stolen digital information to other criminals.

In my research, I’ve found that cybercriminals are leveraging incredibly affordable cloud phone rentals – we’re talking just ten to fifty cents an hour – from various device rental platforms. This surprisingly low cost makes the technology needed to carry out their fraud readily available to a much wider range of actors.

To protect yourself from phone scams involving cloud services, Group-IB and Malwarebytes advise never giving out one-time passwords, authorizing logins you didn’t initiate, or sending money to an account someone claims is secure.

These are the classic social engineering tricks that let criminals in.

To protect your money, it’s important to verify any request from your bank by contacting them directly through their official app or phone number. Also, enable transaction alerts and check your accounts often so you can quickly identify and address any unusual activity.

Read More

2026-04-06 15:01