Godfather malware targets crypto, banking apps

January 9, 2023

By Mike Dalton

A piece of malware called “Godfather” is targeting users of crypto apps and other services, according to a statement from German regulator BaFin on Jan. 9.

BaFin said that Godfather affects about 400 cryptocurrency and banking apps. The malware more specifically targets 110 crypto exchanges, 94 crypto wallets, and 215 banking apps, according to a separate report from Group IB in December.

Godfather steals login data from users by displaying fake login windows on top of real ones, thereby deceiving users into entering their data into a monitored form.

Godfather operates only on Android devices. It mimics Google Protect in order to establish itself. It then falsely scans Play Store downloads for malware and hides itself from the list of installed applications. By imitating Google Protect, Godfather can also leverage AccessibilityService to further gain device access and relay data to attackers.

To read entire article…Click Here!