«Это ты на видео?»: в России задержали создателей вируса Mamont, похищавшего средства с банковских карт

The program was distributed via Telegram and disguised as applications and video files

сотрудники of the Ministry of Internal Affairs detained three suspects who created and distributed the malicious program «Mamont», used to steal funds from bank cards. According to the department, the attackers are involved in more than 300 cases of cyber fraud.

The program was distributed through Telegram channels, disguised as legitimate applications and video files. After infecting devices, the virus intercepted SMS messages from banks and allowed money to be transferred to controlled numbers and electronic wallets.

The detention operation was carried out by employees of the «K» department of the Ministry of Internal Affairs together with colleagues from the Saratov, Tula and Ulyanovsk regions. Criminal cases have been initiated under articles 159.6 («Fraud in the field of computer information») and 272 of the Criminal Code of the Russian Federation («Illegal access to computer information»).

Earlier, the Ministry of Internal Affairs reported that the virus uses apk files, often accompanied by questions like «Is that you in the video?» or containing the word «video» in the name.

Read more on the topic:

The «updated» Mamont fraud scheme has been revealed in Russia

The Mamont virus is massively attacking Russians via Telegram: how not to fall for the tricks of scammers

The Ministry of Internal Affairs: fraudsters create websites of non-existent cheap online stores and distribute the Mamont banking trojan