New Malware Crocodilus Targets Android Wallets

According to Foresight News, researchers from security company ThreatFabric have identified a new malware named Crocodilus that targets Android users by stealing wallet seed phrases. This malware spreads through proprietary drivers and bypasses security protections in Android 13 and later versions, without triggering Play Protect when installed. Crocodilus employs screen overlays to warn users to back up their wallet seed phrases within 12 hours, threatening potential loss of wallet access if ignored. With this information, attackers can gain full control over the wallet and deplete its contents.