From deepfakes to NFC traps, dangers awaiting Android users

Android threats on the rise in the age of AI

 As users become more aware of common cyber threats and fraud indicators, attackers are changing their tactics to avoid triggering typical warning signs. From the first Android malware using generative AI to NGate attacks, ESET experts evaluated new risks and issued critical warnings to users.

Cybersecurity company ESET has detected significant developments in Android threats as cybercriminals develop new AI-supported techniques and increasingly sophisticated fraud methods. ESET researchers recently uncovered the first known case of Android malware that uses generative AI to persist on a hacked device, preventing the user from shutting down or disabling it. While NGate attacks that abuse NFC technology are increasing, fraudsters are also targeting user trust with deepfake-supported Nomani campaigns. These campaigns are becoming more difficult to detect thanks to more advanced AI tools.

Even sophisticated AI-powered attacks require some degree of human interaction. Therefore, users need to be especially careful and vigilant. 

• Do not trust offers that seem miraculous and impossibly good. Deepfakes are clearly evolving, but their content is still fraught with many warning signs. A miraculous investment recommendation from a famous person is a classic example of these warnings.
• Stay calm during unexpected or urgent calls. Always verify the identity of the caller directly with the organization they claim to represent. High-pressure tactics, requesting sensitive data, or requesting payment through hard-to-trace methods (like cryptocurrencies) are strong indicators of fraud.
• Try not to download apps outside of official app stores. To avoid copycat sites that distribute malware, double-check details such as domain name, contact information, "About Us" page, and user reviews.
• Review app permissions carefully. Be careful when an app requests access permission (including accessibility settings) that it doesn't appear to need (for example, a banking app shouldn't request access permission for your contacts); unnecessary permissions are often a sign of malicious behavior.
• Learn to recognize the signs that your device has been compromised. Repeated and unusual overheating, rapid battery drain, strange pop-ups, or apps you did not intentionally install may be signs of malware activity. 
• As human awareness remains the first line of defense, it is more important than ever to have a reliable cybersecurity solution that can detect never-before-seen threats.
• Malware can sneak into your device and cause chaos in your digital life and beyond. Update your phone regularly; Use a reliable mobile security solution.

While awareness remains the first layer of defense, users also need modern security tools that can detect new and unknown threats. Solutions like ESET Mobile Security for Android offer AI-powered malware protection, anti-phishing, payment protection, adware detection and call filtering to block advanced attacks at an early stage.