F5 Labs researchers have discovered a new Android malware family that can steal financial and personal data after gaining control of afflicted devices.
MaliBot is a Trojan that masquerades as a bitcoin mining app, but it can also masquerade as a Chrome browser or another app. The danger focuses on gathering financial information and stealing bitcoin as well as personally identifying information from infected devices (PII).
The malware employs a VNC server implementation to gain control of infected computers, as well as the ability to steal and circumvent multi-factor authentication. MaliBot’s capabilities have been discovered to include support for web injections and overlay assaults, the capacity to launch and uninstall apps, and the ability to steal a large amount of data, including cookies, MFA codes, and SMS messages, among other things.
Read More: https://www.securityweek.com/malibot-android-malware-steals-financial-personal-information
