malware Crocodilus targets multiple countries' Wallet and bank customers in attacks.

Mars Financial News: Crocodilus, an Android banking Trojan, has recently been upgraded to launch attacks against cryptocurrency users and bank customers around the world. Security firm ThreatFabric discovered that the malware had spread from its original location in Turkey to several countries, including Poland, Spain, and Argentina. The latest variant is capable of spreading malicious programs disguised as browser updates through Facebook ads to steal login credentials from banks and encrypted apps through overlay attacks. The Trojan adds the ability to automatically extract the mnemonic phrase and private key of a cryptocurrency wallet, as well as modify the victim's address book to implant a fake "bank support" number. Attackers can now commit crimes by renting crypto stealing tools for 100-300 USDT per visit. （Cointelegraph）