Malware Analysis: Chameleon
Protect Mobile Bank Apps from Chameleon
Chameleon is a new, dangerous trojan. This Android malware can hijack mobile banking apps and steal sensitive information.
Our experts have conducted an in-depth analysis of Chameleon, and this report sheds light on its stealthy methods, invasive functionalities, and how you can guard against it.
What is Chameleon Malware?
- A newly-discovered banking Trojan with no links to known families but similarities to Xenomorph.
- Targeting specifically Australia and Poland (for now).
- Deceptively poses as legitimate apps such as CoinSpot, IKO, Chrome, Bitcoin, or even ChatGPT.
Chameleon’s Sinister Functionalities:
- Keylogging to steal passwords
- Overlay attacks to mimic banking apps
- SMS capture to bypass two-factor authentication.
- Cookie stealing to impersonate customers’ online sessions.
- And more!
Download our report to get actionable advice to protect your bank and customers.