GodFather Malware Now Targets 500+ Banking and Crypto Apps

CRIL reports that the GodFather Android malware has evolved into a more evasive native-code variant that targets over 500 banking and cryptocurrency apps worldwide. Distributed via phishing APKs (example: a fake MyGov site), it abuses Android Accessibility services to close legitimate apps, load fake login pages into WebView, perform automated gestures, keylog, and communicate with a C2 server; targeting has expanded geographically beyond its original countries.