Cerberus Malware Fails; Source Code Sold On Darkweb

The report describes an Android banking trojan (discovered 2019) targeting more than 30 applications—including US, French and Japanese banking apps and numerous non-banking apps—with capabilities such as credential and credit-card theft, overlays, keylogging, SMS harvesting/forwarding, remote app control, C2 resilience, and self-protection; it states the malware infiltrated Google Play Store and its source/operations are being sold on a darkweb market, although Google Play Protect has recently reduced the project's effectiveness.