The Xenomorph Android banking trojan, which steals users’ personal and login information, is now targeting North American users. The malware, initially linked to the Alien banking trojan, was previously observed targeting European banks, as well as some cryptocurrency wallets and email applications. It is now targeting more than 30 financial applications in the US, 25 in Spain, and over 15 banking applications in Canada. It is primarily distributed via phishing pages posing as a Chrome update.

Police detains Smokeloader malware customers, seizes servers
Europol has arrested five people linked to the Smokeloader botnet in a continued crackdown from Operation Endgame. The operation last year seized over 100 servers