Chameleon Banking Trojan Makes a Comeback Cloaked as CRM App

Researchers observed a resurgence of the Chameleon Android banking Trojan targeting hospitality and business customers in Canada and Europe; the campaign uses the BrokewellDropper to bypass Android 13+ AccessibilityService restrictions, masquerades as CRM or security apps to phish employee credentials, installs malicious certificates, runs in the background to keylog and exfiltrate sensitive information, and aims to access corporate banking accounts with potentially significant financial impact.