Medusa Reborn: Zimperium’s Robust Defense

Zimperium summarizes research on a compact variant of the Medusa mobile banking trojan that is actively being distributed (reported via 65 unique malicious apps) and targets users in countries including Turkey, Spain, France, and Italy. The variant incorporates advanced capabilities—keylogging, screen control, SMS read/write, overlay attacks, and remote uninstallation—and is spread through social engineering and fake-update droppers; Zimperium notes its detection products can identify most reported samples and block associated C2 traffic.