Vicious Crocodilus Malware Has Evolved And It's Bad News For Android Users

Crocodilus, a relatively new banking trojan targeting Android devices, is continuing to evolve since it was first spotted back in March by the Mobile Threat Intelligence team at Threat Fabric. The improvements aim to make the malware harder to detect alongside adding new features. Additionally, the threat actors that are deploying this malware have started to expand to other parts of the globe.

If malware makers want their wares to remain viable, then it needs to be difficult to detect. The developers behind Crocodilus did just that with its latest variant. Its payload has received a bump to its XDR encryption, while extraneous code has been tossed in for good measure to make it more difficult to reverse engineer. Moreover, it now uses a technique called code packing, which uses compression as well as encryption to obfuscate its file signature.

However, the changes to the malware have gone beyond just ...