BANKING MALWARE EVENTBOT

The CERT-In advisory said that EventBot is a “mobile-banking Trojan and info-stealer that abuses Android’s in-built accessibility features to steal user data from financial applications, read user SMS messages and intercept SMS messages, allowing malware to bypass two-factor authentication.”

• “The EventBot trojan has over 200 different financial applications under its target, including banking applications, money-transfer services, and cryptocurrency wallets, or financial applications based in the US and European region,” .
• CERT-In noted that EventBot has not been spotted on the official Google Play Store as of now but it can “masquerade” as a genuine application to cheat users.
• The cybersecurity agency noted that the malware asks for permissions such as “controlling system alerts, reading external storage content, installing additional packages, accessing the internet, whitelisting it to ignore battery optimisation, auto-initiate upon reboot, read and receive SMS messages as well as continue running and accessing data in the background” once it is installed on victim’s Android phone.

HOW TO SAVE YOURSELF FROM EVENTBOT

• CERT-In has suggested certain counter-measures for Android phone users to save themselves from the virus infection.
• These steps include not downloading or installing applications from untrusted sources like unknown websites or links sent over mail or SMS.
• Users should also look at the app reviews, details, number of downloads, and user reviews of an app before downloading from the Play Store.
• Other security steps include installing an updated anti-virus solution and keeping their phone updated with the latest Android updates and patches.
• Users should also exercise caution while tapping on URLs and avoid using unsecured or unknown Wi-Fi networks.
• “EventBot is a typical malware designed to steal data of financial applications on a victim’s phone.

• The Union Health Ministry announced fresh workplace guidelines on Tuesday.
• With the easing of the lockdown measures and with more offices/workplaces starting operations, the Ministry directed that anyone diagnosed as a suspected/confirmed case of COVID-19 should immediately inform the office authorities and isolate themselves.
• While there was no need to close the entire office building/halt work if one or two cases were detected, a large outbreak would require that the building be shut down for 48 hours and disinfected.
• The guidelines make it mandatory to maintain a physical distance of at least one metre to be followed at all times along with use of face covers/masks.

ICMR TO RELOOK

• The Ministry also said that no decision has been taken as yet to replace hydroxychloroquine (HCQ), introduced as a game-changer to arrest the spread of COVID-19, as a prophylactic, with HIV combination drugs, after reports of experts demanding that it be dropped from the safety guideline list of drugs prescribed for high-risk persons, including healthcare workers.