VoidStealer Trojan Bypasses Chrome Security
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Suspicious | Risk Score: 7/10 | Severity: high
Category: phishing
How VoidStealer Trojan Bypasses Chrome Security Works
The new VoidStealer Trojan has been identified as a threat that circumvents Chrome's App-Bound Encryption. This allows the malware to hijack user sessions and steal sensitive data stored within the browser.
How This Scam Works — Detailed Explanation
Scammers behind the VoidStealer Trojan are utilizing a sophisticated approach by targeting browsers like Google Chrome, which is widely used across India. They often lure their victims through social engineering techniques on popular platforms such as WhatsApp, where they send messages impersonating trusted entities like banks or government services. Once a victim clicks on a malicious link shared in these communications, the VoidStealer Trojan is downloaded unsuspectingly. This can happen through seemingly legitimate job offers or offers for money transfers, which are particularly enticing during financial distress periods, like the COVID-19 pandemic.
The psychological tactics employed by scammers are manipulative and cleverly designed to build trust with the victim. For instance, they may pose as customer support representatives from recognized banks asking users to confirm their identity by clicking on a link which leads to a fake page designed to harvest sensitive data. These scams often induce a sense of urgency or fear, such as warning the user of possible account suspension or funds being locked, prompting victims to act quickly without verifying the legitimacy of the request.
Once a victim falls for the scam, they unwittingly grant the VoidStealer Trojan access to their session on Chrome. The malware circumvents Chrome’s App-Bound Encryption, allowing it to hijack user sessions and steal sensitive data like online banking credentials, Aadhaar numbers, or payment information linked to UPI accounts. There are many reported cases in India where users have lost significant amounts of money due to scams involving UPI transactions after their browsers were compromised by such Trojans. In one case, an individual reportedly lost ₹5 lakh after falling prey to a phishing attack that utilized the malware.
The impact of the VoidStealer Trojan in India is severe. Recent statistics show that the country has seen an increase in cybercrime, with reports indicating losses exceeding ₹1,000 crore in various forms of online fraud annually. The RBI, MHA, and CERT-In have all issued advisories regarding the urgent need to protect personal data, as these scams are affecting a growing number of citizens. The RBI has also stressed that it is crucial for users to be vigilant and adopt necessary security measures due to the expanding frontiers of cyber fraud, especially as online banking becomes more prominent.
Identifying the VoidStealer Trojan scam requires careful scrutiny of communications, especially those that request sensitive information. Legitimate communications from banks or service providers would never ask you to click on links or share sensitive personal information through unsafe channels. Always look for signs such as poor grammar, an absence of contact information, or suspicious links. Ensuring that you navigate directly to official websites rather than through links in messages is a critical preventive measure and can save users from falling victim to this dangerous type of phishing scam.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does VoidStealer Trojan Bypasses Chrome Security Target?
General public across India
Red Flags — How to Identify VoidStealer Trojan Bypasses Chrome Security
- VoidStealer
- Trojan
- Chrome
- App-Bound Encryption
- data theft
- session hijacking
- malware
What To Do If You Encounter VoidStealer Trojan Bypasses Chrome Security
- Report the incident immediately at 1930 or through cybercrime.gov.in.
- Notify your bank about the suspicious activity and request them to secure your account.
- Change your passwords for all online banking and financial services.
- Monitor your bank statements closely for unauthorized transactions.
- Enable two-factor authentication on UPI and banking apps for added security.
- Educate yourself and others about recognizing and avoiding phishing scams.
How to Report VoidStealer Trojan Bypasses Chrome Security in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a phishing scam?
- Immediately contact your bank's helpline (e.g., SBI 1800-11-1109) to secure your account and prevent further misuse.
- How can I identify the VoidStealer Trojan scam?
- Look for messages that request personal information through insecure channels or surprise requests for urgent actions.
- How do I report this type of scam in India?
- You can report online scams at 1930 or by visiting cybercrime.gov.in. Additionally, inform your bank about potential fraud.
- How can I recover money or protect my accounts after this scam?
- Contact your bank to discuss recovery options. It's also vital to monitor your accounts and change passwords immediately.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.