Crocodilus malware targets crypto wallets and bank customers in multiple countries

Odaily News After a recent upgrade, the Android banking Trojan Crocodilus began to attack cryptocurrency users and bank customers worldwide. Security company ThreatFabric found that the malware has spread from the original Turkey region to Poland, Spain, Argentina and other countries. The latest variant can spread malicious programs disguised as browser updates through Facebook ads, using overlay attacks to steal login credentials for banks and encryption applications. The Trojan has added the function of automatically extracting cryptocurrency wallet mnemonics and private keys, and can also modify the victims address book to implant fake bank support numbers. Attackers can now commit crimes by renting cryptocurrency theft tools at a cost of 100-300 USDT per time. (Cointelegraph)