A new Android banking trojan called “Sturnus” offers extensive control over infected devices, including message capturing and remote actions. It poses a significant threat to financial institutions and user privacy, particularly in Europe. #Sturnus #BankingTrojan
Keypoints
- Sturnus can bypass encrypted messaging by capturing screen content after decryption.
- The malware uses overlay-based phishing, keylogging, and screen streaming to steal data.
- It offers remote control capabilities, including injecting text and blocking screens during transactions.
- Sturnus can monitor and extract messages from apps like WhatsApp, Signal, and Telegram.
- Targeted attacks are currently focused on financial institutions in Southern and Central Europe.
Read More: https://thecyberexpress.com/android-malware-records-encrypted-messages/