'Crocodilus' Sharpens Its Teeth on Android Users

A ThreatFabric report describes the Crocodilus Android banking Trojan that has been distributed via fake banking apps, bogus browser updates, and malicious ads across multiple countries; the malware now adds contacts for social engineering, overlays banking apps to harvest credentials, and includes a seed-phrase collector to steal cryptocurrency wallets while employing packing, encryption, and obfuscation to evade detection.