Beware of fake Android Clubhouse app, it has BlackRock malware

The Clubhouse app made its debut in April 2020 and since then it has steadily gained prominence around the world largely thanks to the tech billionaires-- Elon Musk and Bill Gates-- interviews on the audio-only drop-in app.

It has been download on more than 12 million iOS devices and Clubhouse is yet to be made available on the Google Play store for Android phone and tablets. Apparently, some bad actors have taken advantage of the delayed launch and have sneaked in fake Clubhouse app to the Android ecosystem, said Lukas Stefanko ESET malware researcher.

Naive users have been tricked to install duplicate Clubhouse apps with malicious malware from an online store that closely resembles the company's original website.

Once inside the phone, the fake Clubhouse app with BlackRock trojan will start stealing personal and financial details from apps up to 480 with types ranging from trade market and e-commerce to cryptocurrency exchange, digital wallets and banking, and also social media platforms such as Twitter, WhatsApp, Facebook, Amazon, Netflix, Outlook, eBay, Coinbase, Plus500, Cash App, BBVA and Lloyds Bank.

ESET reporting trojan malware on fake Clubhouse website. Credit: ESET

What's more shocking is that the trojan-laced app is capable of intercepting text messages containing OTP (One-Time-Password). The malicious app also asks the victim to enable accessibility services, effectively allowing the criminals to take control of the device, ESET report said.

People are advised not to download apps from unsecured websites. One major telltale sign is 's' will be missing from 'http' URL. Safe websites have-- 'https' in the URL.
It goes without saying, install apps only from Google Play store (for Android) and Apple App Store (iOS/iPadOS).

Also, users should make sure they have an anti-virus app on their phones.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.