Xenomorph Malware Campaign Targets More Than 30 U.S. Banks

· Original article ↗

Summary

ThreatFabric says a new Xenomorph campaign uses phishing pages to distribute malicious APKs, targets more than 30 U.S. banks, Portuguese financial institutions and cryptocurrency wallets, and has driven thousands of downloads, particularly in Spain and the U.S.

Key points

  • ThreatFabric reports that Xenomorph is targeting more than 30 U.S. banks, financial institutions in Portugal and several cryptocurrency wallets.
  • The campaign uses phishing web pages to lure people into downloading malicious APKs.
  • ThreatFabric says the active campaigns have generated thousands of downloads, especially in Spain and the United States.
  • The article places Xenomorph’s spread alongside activity involving malware families Octo, Hydra, Hook and Anatsa.

Article Details

Event Type
Xenomorph malware campaign expansion using phishing web pages to distribute malicious APKs
Impact
ThreatFabric reports that the campaign targets more than 30 US banks, financial institutions in Portugal, and several cryptocurrency wallets. It also reports thousands of downloads, especially in Spain and the US.

Malware

Countries

Related Articles