InfoSecBulletin Cybersecurity for mankind
The “Antidot” Android Banking Trojan pretends to be a Google Play update app and targets Android users in different regions. It uses VNC and overlay techniques to steal credentials.
Cyble Research and Intelligence Labs (CRIL) found that the new Android Banking Trojan, called “Antidot,” pretends to be a Google Play update app and can target many different people. It has harmful features like overlay attacks and keylogging to get sensitive information. Antidot communicates with a server to get commands and can do things like collect SMS messages, make USSD requests, and control device features like the camera. It can also use VNC to control infected devices.
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwideÂ
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
Apple Patches 28 Security Flaws in macOS, iOS, and iPadOS
DoNot (APT-C-35) Targeting Bangladesh Military Personnel
McDonald’s, Vodafone Affected by Azure Theft Campaign Exposing Millions of Records
NIST to Modernize NVDÂ in the Age of Artificial Intelligence
Cyble Research and Intelligence Labs (CRIL) published an analysis of an Android Banking Trojan called Brokewell. It was created by malware developer Baron Samedit and can take control of devices previously.
Now, CRIL found a new Android Banking Trojan called “Antidot,” first seen on May 6, 2024. This Trojan uses overlay attacks to steal credentials. Click here to read out the full report.
