Crocodilus malware

[Kemarit]

The malware is said to affect users in Spain and Turkey but it is good for people to know about it. It can target your bank app, crypto wallets and have access to information on your device.

It can know what you typed that displayed on the screen. It is said to even be an advanced keylogger, revealing your authenticator OTP. It will deceive you into providing your wallet seed phrase and many more.

It is good to read more about it:
https://www.threatfabric.com/blogs/exposing-crocodilus-new-device-takeover-malware-targeting-android-devices

im really aware about this in the last few months . in some hacker forum they talk about this, more like a rat tools but now on smartphone . I can tell these sophisticated banking trojans are becoming increasingly dangerous.
The most alarming aspect of Crocodilus is its ability to capture authentication codes and screen content in real-time. This essentially defeats the purpose of two-factor authentication, which many crypto users rely on for security.
While it's currently targeting users in Spain and Turkey, these malware families typically expand their reach quickly. The threat actors often refine their techniques in smaller markets before going global.

Yes, that's why it's not only just a key logger, it's what they call accessibility keylogger as it can capture anything and all events that you do in your mobile devices, including OTP code and sent it to their command and control.

Criminals are getting more sophisticated and they really used a lot of techniques that keeps evolving because they know that it's going to be worth to make this malware because of the potential to hit us and steal our hard earn money.

[Samlucky O]

The malware is said to affect users in Spain and Turkey but it is good for people to know about it. It can target your bank app, crypto wallets and have access to information on your device.

It can know what you typed that displayed on the screen. It is said to even be an advanced keylogger, revealing your authenticator OTP. It will deceive you into providing your wallet seed phrase and many more.

It is good to read more about it:
https://www.threatfabric.com/blogs/exposing-crocodilus-new-device-takeover-malware-targeting-android-devices

This should be a deadly malware compared to the previous phishing malware attack we all knows. This could be the advanced one or probably the pro version lolz, although i haven't  come across this for the first time. I have tried clicking the Link but all to no avail but if. I may ask how can this malware be prevented since mia Chloe said it is difficult to trace this type of malware?

[btcltcdigger]

So its one of many social engineering scams out there. Threaten you to think you're in danger, and makes you do the work of showing it the phrase,
To be honest, i'd rather just hard reset my phone and reinstall. If your wallet isn't backed up as is, you're in trouble anyway

[jcojci]

That could be developed malware because that malware could know whatever we typed. It is too dangerous if we infect with the malware so must be more careful when install an app. I hope that malware will not spread to other countries but the important we don't need to install unknown application to our mobile phone. I can not imagine how happy the hacker when they get a target rich person who have a lot of money and know whatever that rich person do. I remember about the keylogger in PC that can get anything from target by what he write in keyboard so we must be more carefully.

[KiaKia]

The malware is said to affect users in Spain and Turkey but it is good for people to know about it. It can target your bank app, crypto wallets and have access to information on your device.

It can know what you typed that displayed on the screen. It is said to even be an advanced keylogger, revealing your authenticator OTP. It will deceive you into providing your wallet seed phrase and many more.

It is good to read more about it:
https://www.threatfabric.com/blogs/exposing-crocodilus-new-device-takeover-malware-targeting-android-devices

If hackers have access to my phone and PC they won't get away with anything, all that hassle for $10 ?? I will laugh them hard, because I don't even have money in my crypto wallets on my phone and my PC, I know perfectly well that these are not the right places to store your funds or assets.

Even my bank account, I don't leave money in there, once I need cash I will move the exact amount needed from my hardware wallet to an exchange and do peer to peer transaction into my bank account, it won't take me minutes to move the money from my bank account out and use it for whatever I want to use it for.

I am not saying that you should be careless because you have a hardware wallet, I  just saying that even after all the carefulness, always make sure you don't store large funds in your PC or your crypto wallets on your smartphones.

[arwin100]

So its one of many social engineering scams out there. Threaten you to think you're in danger, and makes you do the work of showing it the phrase,
To be honest, i'd rather just hard reset my phone and reinstall. If your wallet isn't backed up as is, you're in trouble anyway

I think we seen a same like attempt like this and they just recreate this every time we they see some opportunity to attack.

That's why its really better for people to get proper knowledge about different kinds of threats they might encounter so that they can avoid getting any potential hacking issues.

I have post about other malware named MassJacker on our local board which target people who usually download those pirated softwares. You can read how they attack their potential victims on quoted text below.

A new malware campaign is rerouting thousands of dollars from cryptocurrency transactions into the accounts of hackers.

As reported by The Hacker News, the malware, called MassJacker, is a type of cryware known as clipper malware which is targeting users searching for pirated software online.

Instead of the pirated software though, they actually end up downloading clipper malware which is designed to steal cryptocurrency by watching an infected machine’s clipboard and switching out copied cryptocurrency wallet addresses for one controlled by the attackers behind this campaign.

More info about that malware https://tech.yahoo.com/general/articles/massjacker-malware-hijacking-digital-wallets-153923768.html

So same with what OP shared its like hackers have massive campaign spreading this malware so we need to be careful what we are downloading online.

[promise444c5]

I have post about other malware named MassJacker on our local board which target people who usually download those pirated softwares. You can read how they attack their potential victims on quoted text below.

Not surprised about those pirated and cracked software, torreents and files,some even warn you about the risk of malware before downloading.. I guess people like free things as it saves some bucks  
 
The info still points  out  malware attacking crypto users but that doesn't change any pattern it's still  taget clipboard and related vuneralbility , we are in the digital age, everyone wants to get a  crypto for his or herself yet there are people willing to rip it off in a minute and since there are already existing similar  prototypes,they simply modify existing malware to target specific data types..

So same with what OP shared its like hackers have massive campaign spreading this malware so we need to be careful what we are downloading online.

Downloading from a reputable source is good, but verifying the source multiple times is even better. People should also avoid downloading unnecessary software; researching before downloading can help prevent this.

[lovesmayfamilis]

Thanks, OP, for the news. Frankly speaking, this Trojan is quite tricky; the fact that it hides under the guise of a browser, uses remote control, and performs banking operations without the owner's knowledge is a rather dangerous advantage of this Trojan. I think few people will think about the pop-up message about saving their seed phrase. Being a newbie and without regular monitoring of sites that notify users about new viruses, it is difficult to think that something is wrong. I wonder how antivirus behaves, and whether they can detect such Trojans since it is clear that social engineering sometimes becomes simply elusive.

[arwin100]

I have post about other malware named MassJacker on our local board which target people who usually download those pirated softwares. You can read how they attack their potential victims on quoted text below.

Not surprised about those pirated and cracked software, torreents and files,some even warn you about the risk of malware before downloading.. I guess people like free things as it saves some bucks  
 
The info still points  out  malware attacking crypto users but that doesn't change any pattern it's still  taget clipboard and related vuneralbility , we are in the digital age, everyone wants to get a  crypto for his or herself yet there are people willing to rip it off in a minute and since there are already existing similar  prototypes,they simply modify existing malware to target specific data types..

Not a good decision to do for thinking that they can save some bucks for hunting free pirated and cracked software because they are making their selves as easy targets by those hackers.

That's why they should not ignore this matter and know these malwares exist so that their efforts will not put into waste and could assure that they are safe from any potential harms brought by this intrusive software created by criminals.

Downloading from a reputable source is good, but verifying the source multiple times is even better. People should also avoid downloading unnecessary software; researching before downloading can help prevent this.

This is really best thing to do right now especially that they are dealing with crypto especially if they stored important dealings including wallet extension so better verify those legit sources and download  those software they need there. Safety is important rather than getting a risky free stuffs online.

[Marvelockg]

I am not saying that you should be careless because you have a hardware wallet, I  just saying that even after all the carefulness, always make sure you don't store large funds in your PC or your crypto wallets on your smartphones.

It is not just about not having any funds in your wallet or not leaving any funds in your banking app. It is a fact that the malware can steal private information from your device through your screen. i don't know how you can survive effectively without once in a while having some assets in an exchange maybe for a while or even making use of banking apps for regular transaction but for the regular person, in one way or the other, you can't avoid having some funds that is linked to your device, hence the need to be cautious of this kind of malware.

I have always been a fan of downloading keyboards that allow me to store some text on my clipboard as reusable text. It is just for the ease and convenience that comes with it, but with this information, I guess it calls for more caution on the kind of extension one downloads.

[Cryptohygenic]

Obviously, I do not think the trojan is only for Android users as it likely affects Apple and others as well.

The people that detected the malware said it is for Android devices. They did not mention that it is also designed for other operative system.

But there are Trojans that can be designed for other operative systems. We really need to be very careful regardless of the operating system that we are using.

Either be android or whatsoever device that this trojan can be effective should not be a case of argument here but to take note that such malwares exists towards the penetration of our device manipulations.
So I think the obtainable key point there should be the software program has the potential to ridicule our funds and privacies.

[Peanutswar]

I guess this kind of malware still needs permission to the users, and we know that every time people keep doing an application installment is they keep allowing the permissions in your application so this is the reason why stay vigilant before installing the application or any kind of platform into your devices most likely if that's your main device to avoid having stealing of information today most of the people are using their phones related into the different access such as your assets, banks and records.

[btcltcdigger]

I guess this kind of malware still needs permission to the users, and we know that every time people keep doing an application installment is they keep allowing the permissions in your application so this is the reason why stay vigilant before installing the application or any kind of platform into your devices most likely if that's your main device to avoid having stealing of information today most of the people are using their phones related into the different access such as your assets, banks and records.

Yeah usually people don't even check what permission the app is requesting. But it should be common sense to everyone.
A game shouldn't need to access your phonebook. A video app shouldn't be able to make calls.
A wallet has no need for your media files. Don't be stupid people

[Slimzeee]

This really makes it feel like one has to constantly worry about their hard-earned possessions being stolen at any moment. It's a clear indication of both the pros and cons of technological advancement.
Waking up to find that everything you've worked hard for is suddenly gone is a crazy thought, and even just thinking about it can send chills down your spine. No matter the effort put in place, let's just hope that, by God's grace, we’re never unlucky, even for a second.

[yamin_galib]

A malware is a very harmful virus. Due to this virus, our hard-earned money can disappear. So it is up to all of us. In fact, no one can understand the pain of this except those who have not been affected.For this reason, we all have to refrain from installing any software from all kinds of unauthorized sources.