A new banking Trojan targeting Android devices has been detected by Cyble Research and Intelligence Labs (CRIL), the research branch of threat intelligence provider Cycble.
In a report published on May 16, CRIL described sophisticated malware incorporating a range of malicious features, including overlay attacks, keylogging and obfuscation capabilities.
The researchers called the Trojan “Antidot” after a string within its source code.
What the Antidot Trojan Looks Like
Antidot poses as a Google Play update application, displaying a counterfeit Google Play update page upon installation.
Cyble observed that this fake update page has been crafted in various languages, including German, French, Spanish, Russian, Portuguese, Romanian, and English. This suggests that the malware is targeting Android users in different regions.
No tags.
