A new version of the Android Chameleon banking Trojan can bypass biometric security to break into smartphones. Initially detected in January targeting Australian and Polish users, the malware imitates trusted apps to infiltrate devices. Now, a more advanced variant is also targeting UK and Italian Android users via a Dark Web Zombinder app-sharing service. This version can interrupt biometric operations to access passwords or unlock devices. The trojan can also use Android’s Accessibility service for device takeovers and the AlarmManager API for task scheduling.
FBI Deletes PlugX Malware from 4,250 Hacked Computers in Multi-Month Operation
The FBI has deleted PlugX malware from more than 4,250 infected computers as part of a US Department of Justice-approved multi-month operation. PlugX, controlled by