New trojan Crocodilus on prowl to steal Android users’ crypto wallet keys

With over a 3.5 billion active user base, Android is the largest mobile ecosystem globally. However, this also attracts threat actors to prey on millions of naive phone users.

In the latest instance, internet security firm ThreatFabric has uncovered a new banking trojan on the Android platform. It was shared by bad actors on social media platforms, and some gullible users downloaded them.

And to ensure the malware-laced app remains hidden, the hackers have developed a sophisticated technique that bypasses Android 13 (and newer) security protections offered by Google Play Protect.

And, once installed, it asks users to permit access to Accessibility Service. This particular feature on Android phones is intended to help users with disabilities operate apps with less hassle. But, in this case, Crocodilus misuses the permission to monitor screen content, simulate gestures, and interact with apps.

This way, it tracks banking apps and in particular targets cryptocurrency wallets to steal digital money.

With the remote access trojan (RAT) functionality of the Crocodilus malware-laced app, hackers can view SMS, emails, and even reply on messenger applications, open financial apps and do more.

As of now, the Crocodilus malware has been detected in European regions. Security researchers have advised Android phone owners to exercise caution on such apps shared on messenger or email services and social media platforms.

Here are some valuable tips on how to safeguard your Android phone:

1) Never install apps from third-party app stores or any online app marketplace or social media platform. Download apps only from the Google Play Store

2) Never side-load apps even when asked by a friend or family member

3) It is good practice to install anti-virus apps on Android phones

4) Turn on Google Play Protect on your Android phone

Go to Settings > Security > Google Play Protect

5) Always update your Android version whenever Google or the Android phone maker releases the security patch or quarterly Android updates

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech