Malware
Crocodilus
- First Reported
- Mar 28, 2025
- Latest Reported
- Oct 6, 2026
Reported Context (3)
- Crocodilus is an Android banking trojan first discovered in March 2025 that has quickly grown into one of the more technically sophisticated consumer threats on the mobile landscape. Once installed — typically through Commercial Spyware: How It Infects Mobile Devices and What It Can Expose
- In March 2025, the Mobile Threat Intelligence team discovered Crocodilus, a new device-takeover Android banking Trojan entering the threat landscape. Crocodilus Android Banking Trojan Expands Campaigns and Adds Seed-Phrase Theft
- This environment has paved the way for the emergence of Crocodilus, a new and highly capable mobile banking Trojan discovered by ThreatFabric. Crocodilus Android Banking Trojan Steals Credentials, OTPs and Crypto Wallet Seed Phrases
Malware (8)
Threat Actors (1)
MITRE ATT&CK (16)
Vendors (2)
Products (11)
Industries (2)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.