A new banking Trojan attacks Android phones silently. It is called Crocodilus and is highly effective because it uses an imperceptible black screen.

The virus makes it easier for cybercriminals by silencing the device to steal banking credentials.

“It targets people in Spain and Turkey, and its success has surprised both banks and cryptocurrency platforms.” The specialists at ThreatFabric were responsible for the discovery, and “it poses a very comprehensive threat because it is equipped with modern techniques such as remote control, black screen overlays, and advanced data collection through accessibility logging, among others.”

The Trojan is installed using a dropper, an executable malware that can bypass restrictions on Android 13 and later. Once installed, it requests the Accessibility Service be enabled for proper operation and “connects to the command server to receive instructions, which include the list of target apps, as well as the interface that will impersonate the legitimate app (overlays) to steal user credentials.”

Crocodilus can perform keylogging, which relies on a keylogger or keystroke log, and thus records on-screen password input. By acting remotely, it facilitates the actions of cybercriminals.

M.Pino

Source: 20minutos

(Reference image source: Denny Müller on Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada New Crocodilus trojan attacks Android phones apareció primero en Bitfinance.

The cybersecurity company Cleafy detected attacks by the ToxicPanda malware on Android phones in Spain, Portugal, Italy and Peru.

More than 1,500 users worldwide had their banking data stolen through the infiltration of this malicious software, which, according to Cleafy, is in development.

The ToxicPanda Trojan can gain access to victims’ bank accounts and execute unauthorized transfers. To do so, it uses techniques that allow it to “intercept one-time passwords, remotely control the device and manipulate applications to obtain confidential information.”

The way it infiltrates Android phones is highly dangerous, as it can “capture data from the applications that the user uses, such as passwords and credit card numbers, and send them to cybercriminals.”

M.Pino

Source: fayerwayer

(Reference image source: Pathum Danthanarayana in Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada ToxicPanda malware attacks Android devices apareció primero en Bitfinance.