Security News > 2022 > February > New Xenomorph Android malware targets customers of 56 banks

A new malware called Xenomorph distributed through Google Play Store has infected more than 50,000 Android devices to steal banking information.
Researchers at fraud and cybercrime prevention company ThreatFabric analyzing Xenomorph found code that is similar to Alien banking trojan.
Banking trojans like Xenomorph aim to steal sensitive financial information, take over accounts, perform unauthorized transactions, and operators then sell the stolen data to interested buyers.
The Xenomorph malware entered the Google Play Store via generic performance-boosting applications such as the "Fast Cleaner", which counts 50,000 installations.
It still represents a significant threat as it can fulfill its info-stealing purpose and it targets no less than 56 different European banks.
To steer clear from Android malware that lurks in the Play Store, users should avoid installing apps that carry promises that are too good to be true.
News URL
Related news
- Vo1d malware botnet grows to 1.6 million Android TVs worldwide (source)
- BadBox malware disrupted on 500K infected Android devices (source)
- North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps (source)
- New Android malware uses Microsoft’s .NET MAUI to evade detection (source)
- APT36 Spoofs India Post Website to Infect Windows and Android Users with Malware (source)
- Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection (source)
- New Crocodilus malware steals Android users’ crypto wallet keys (source)
- Counterfeit Android devices found preloaded With Triada malware (source)
- Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices (source)
- SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps (source)