In short: Pix users targeted by malware
BrasDex has been operating for about a year and has reportedly recorded at least 1,000 infections in the country, with losses of hundreds of thousands of reais after attacks involving the hijacking of money transfers and the theft of bank identifiers.
The malware initially poses as Android settings applications and targets Brazilian banking applications.
In some cases, the virus installation is done through text messages.
The cybercriminals carry out the scams on the system in such a way that the security of the devices is disabled by the virus. In this way, the SMS messages are accessed and the customers' bank details are stolen. With this, the criminals carry out transactions in the name of the user.
The Italian cybersecurity company Cleafy points out that the virus acts on authentication applications and is able to disable Google Play Protect.