The updated Medusa Android banking trojan has become more dangerous
28.06.24
After about a year of silence, the Medusa Android banking trojan has resurfaced, Cleafy Threat Intelligence reported. The newly discovered campaigns target users in Canada, France, Italy, Spain, Turkey, the UK and the US. Attackers use smaller versions of the malware, which allows them to operate more stealthily.
Medusa, also known as TangleBot, is a banking trojan for Android operating as a Malware-as-a-Service (MaaS). It was first discovered in 2020 and provides attackers with powerful tools to remotely perform unauthorized financial transactions from infected phones. Its features include keystroke recording, screen manipulation, and text message manipulation.
New Medusa campaigns began in May 2024, marking the Trojan’s first activity since July 2023. Unlike other malware with the same name, Medusa is a banking trojan, not a Mirai botnet for DDoS attacks. Updated versions of the Trojan are more compact and require fewer permissions to perform the same malicious actions on infected devices. They also have new features such as overlaying full-screen windows and capturing screenshots, making the Trojan even more powerful and able to initiate fraudulent transactions directly from the device without the user’s knowledge.
Attackers use smishing (SMS phishing) to trick Android users into installing malware. They distribute it through dropper apps, including a fake Chrome browser and a 4K Sports streaming app.
Cleafy Threat Intelligence reports that no Medusa Trojan dropper has been detected in the Google Play Store at this time. This shows that Google’s security measures are working effectively. Users are safe as long as they do not download or install questionable programs from the Internet, especially from links received in messages from unknown numbers. The safest way is to download applications only from official application stores and official websites of companies.
Don't miss interesting news
Subscribe to our channels and read announcements of high-tech news, tes
![Articles](https://hi-tech.ua/wp-content/themes/softpress/img/arrow.png)
Acer Nitro 16 AN16-41-R86T gaming laptop test: fresh
![views](https://hi-tech.ua/wp-content/themes/softpress/img/icons/eyeglasses.png)
![comments](https://hi-tech.ua/wp-content/themes/softpress/img/icons/speach.png)
![Acer Nitro 16 AN16-41-R86T (NH.QKCEU.003)](https://hi-tech.ua/wp-content/uploads/2024/06/acer-nitro-16-an16-41-r86t-nh.qkceu_.003-23-300x225.jpg)
The line of Acer Nitro gaming laptops has been replenished with new models in the middle and high middle price segment. Let’s talk about the new Acer Nitro 16 model with an AMD processor and a GeForce RTX video card in more detail.
![News](https://hi-tech.ua/wp-content/themes/softpress/img/arrow.png)
Starting tomorrow, all Google Universal Analytics services will be discontinued
Google serviceTo keep access to Google Universal Analytics data, you need to download or export it separately. Failure to do so using one of the methods described in the Google Analytics Help Center will result in the data being deleted permanently
The Realme 12 4G smartphone at a price of $215 received a 120 Hz OLED display, a Snapdragon 685 chip and a Sony 50 MP camera
Android Realme smartphoneThe realme 12 4G smartphone has a flat OLED display with a diagonal of 6.67″, a refresh rate of 120 Hz and a FHD+ resolution. Brightness reaches 2000 nits. Built-in fingerprint scanner.