Xenomorph Malware Campaign Targets More Than 30 U.S. Banks

Summary
ThreatFabric says a new Xenomorph campaign uses phishing pages to distribute malicious APKs, targets more than 30 U.S. banks, Portuguese financial institutions and cryptocurrency wallets, and has driven thousands of downloads, particularly in Spain and the U.S.
Key points
- ThreatFabric reports that Xenomorph is targeting more than 30 U.S. banks, financial institutions in Portugal and several cryptocurrency wallets.
- The campaign uses phishing web pages to lure people into downloading malicious APKs.
- ThreatFabric says the active campaigns have generated thousands of downloads, especially in Spain and the United States.
- The article places Xenomorph’s spread alongside activity involving malware families Octo, Hydra, Hook and Anatsa.
Article Details
- Event Type
- Xenomorph malware campaign expansion using phishing web pages to distribute malicious APKs
- Impact
- ThreatFabric reports that the campaign targets more than 30 US banks, financial institutions in Portugal, and several cryptocurrency wallets. It also reports thousands of downloads, especially in Spain and the US.
Malware
Countries
PortugalAn enlarged target list, with Xenomorph now laying siege to financial institutions in the United States, Portugal, and several cryptocurrency walletsSpainActive campaigns causing thousands of Xenomorph downloads, especially in Spain and the US United StatesAn enlarged target list, with Xenomorph now laying siege to financial institutions in the United States, Portugal, and several cryptocurrency wallets