CyberSum logo
Back

Klopatra & Datzbro Trojans Target Android Banking Apps

Cyber Security News by CyberSum.net
4 sources
Security researchers have uncovered two sophisticated Android banking trojans, Klopatra and Datzbro, targeting users worldwide. Klopatra compromises devices using Hidden VNC for remote control and commercial-grade code protection to evade detection, enabling attackers to steal credentials and drain bank accounts. Meanwhile, the Datzbro trojan targets elderly individuals through deceptive social media campaigns, luring them into installing malware disguised as community applications. Both threats abuse Android's accessibility services to perform fraudulent transactions, record keystrokes, and operate stealthily. These campaigns signify a growing trend of professionalized mobile malware using advanced social engineering and evasion techniques for financial gain.

Also Read

Google Gemini Flaws Allowed AI-Powered Data Theft

Researchers have disclosed three now-patched vulnerabilities in Google's Gemini AI assistant that could have enabled data theft and privacy breaches. Dubbed the "Gemini Trifecta," the flaws allowed attackers to use indirect prompt injection to steal sensitive user information, including saved data and location. The vulnerabilities affected Gemini Cloud Assist, its Search Personalization Model, and its Browsing Tool. Attackers could inject malicious instructions into logs or a user's search history, which Gemini would later execute. These commands could then force the AI's browsing tool to exfiltrate the stolen data to an attacker-controlled server, demonstrating how AI systems themselves can become attack vectors.

By Cyber Security News by CyberSum.net