Sova Malware: SBI issues alert regarding fake banking app — here's how this Trojan virus hacks into phones

Sova Malware: In a recent tweet the State Bank of India (SBI) had altered users about the Sova Trojan virus. This virus can stealthily encrypt an Android phone for ransom and is hard to uninstall. 

“Don't let malware steal your valuable assets. Always download the trusted apps from reliable sources only. Stay Alert and #SafeWithSBI,” the SBI tweet read. 

What is Sova Malware? 
According to SBI, SOVA is an Android-based Trojan malware, which targets people using fake banking apps to steal personal data. This malware steals the credentials of the users.
The malware records the user's information when they access their account through net-banking apps and log in. Once installed, the application cannot be uninstalled. 

How does it work?
First this malware is installed in your phone through phishing SMS. After installation, this Trojan sends the details of the apps present in your phone to the hackers. Now the hacker sends malware with the help of Command and Control (C2) a list of targeted addresses for the apps present in the phone. Whenever you use those apps, malware stores your data in an XML file that hackers can access.

What to do if the app is installed?
If this malware is installed on a user's smartphone, then it is difficult to remove it. There is only one way to avoid this, that is caution. So do not click on any unknown link. Always use the trusted app store to download apps. Before downloading any app, check its reviews. Be careful while giving permissions to apps and pay attention to what things you are giving permissions to apps. Keep downloading Android updates and if you want, you can also use anti-virus.