Zscaler ThreatLabz researchers discovered a couple of malicious dropper apps on the Play Store distributing the Xenomorph banking malware.
Xenomorph was first spotted by ThreatFabric researchers in February 2022, at the time the malware was employed in attacks against 56 European banks to steal sensitive information from the devices of their customers.
Xenomorph shares overlaps with the Alien banking trojan, but it has functionalities radically different from the Alien’s one.
Researchers speculate that the two malware could have been developed by the same actor, or at least by someone familiar with the codebase of the Alien banking Trojan.
Zscaler discovered a malicious app in the Play Store named “Todo: Day manager” with over 1,000 downloads.
