Medusa Banking Trojan Strikes Again: New Stealth Features Target Android Users Worldwide

The Medusa banking trojan for Android is back, leaner and meaner, targeting countries like France, Italy, and the USA. This malware, also known as TangleBot, now requires fewer permissions but comes packed with new features like screenshot capturing. Researchers have spotted 24 campaigns using this…

Hot Take:

Just when you thought it was safe to go back to your mobile banking app, Medusa’s back, and it’s got more tricks up its sleeves than a magician at a kids’ birthday party. France, Italy, the US, and other countries better buckle up because this serpent is slithering through their digital wallets.

Key Points:

  • Medusa Android banking trojan re-emerges, targeting multiple countries.
  • New variants are more compact and require fewer permissions.
  • Recent campaigns use SMS phishing and dropper applications.
  • Medusa retains key features but adds new commands like screenshot capture.
  • Central infrastructure fetches URLs for C2 server from social media profiles.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here