News and Analysis

The Xenomorph Android banking trojan, likely linked to the notorious Alien trojan, has expanded its target list to include North America. Xenomorph steals users’ personal and login info and bypasses two-factor authentication via intercepted notifications and SMS. Last year, it targeted banking apps in Europe; now it targets 30 financial applications in the US, 25 in Spain, and 15 in Canada. Its hacker distribution server hosts other malware, prompting speculation about connections between malware families.