Coinbase wallet users targeted by new Android malware

Publicado en by Cointele | Publicado en

This alien doesn't care about taking over the Earth, but it may steal your Bitcoins and dollars.

A newly discovered trojan, known as Alien, is attacking crypto apps on Android phones, including Coinbase, Blockchain.com, and Luno.

This new malware strain is based on the notorious Cerberus trojan, which wreaked havoc in the Google Play store until the team responsible became complacent.

Lack of continued distribution allowed Google Play Protect to almost completely eradicate Cerberus by August 2020.

Alien targets 226 Android apps, mostly geared toward the banking industry.

"Most importantly, it offers a notifications sniffer, allowing it to get the content of all notifications on the infected device, and a RAT feature, meaning that the threat actors can perform the fraud from the victim's device."

The choice of Coinbase and Blockchain.com is understandable as these are two of the most popular crypto apps.

It is less clear why the hackers targeted the much smaller Luno exchange, yet omitted other industry giants like Binance.

x