Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan


Two new dangerous dropper apps have been found on the Android Play Store, and Google has already taken down one of them for spreading the financial malware Xenomorph while pretending to be a lifestyle app.

Zscaler ThreatLabz researchers Himanshu Sharma and Viral Gandhi wrote in a report released on Thursday that the trojan known as “Xenomorph” collects login information from banking applications running on users’ devices. One-time passwords and requests for multi-factor authentication can be stolen because it is able to intercept users’ SMS messages and notifications.

Read More…