ATET Security

Return of the Medusa banking trojan

The return of the Medusa banking trojan after a prolonged absence comes back stronger than before. Medusa banking trojan is a type of malware designed specifically to target banking and financial transactions on Android devices.

Recently, the trojan has resurfaced in multiple campaigns aimed at users of high-end Android phones across several countries including the U.S., U.K., Canada, France, Italy, Spain, and Turkey.

Medusa’s latest iterations now demand fewer permissions and improved features. This made it easier for the malware to perpetrate fraud directly on a compromised smartphone.

The first Medusa variant was found last year July 2023. Where it hosted campaigns by phishing methods to side-load the malware through dropper applications. Researchers identified 24 separate campaigns, 5 of them which were botnets.

To avoid falling victim to a banking trojan, it is crucial to be cautious when downloading APK files from unfamiliar sources. Always ensure that any application you install comes directly from reputable stores like Google Play Store, Amazon Appstore, or Samsung Galaxy Store. This helps minimize the risk of installing malicious software on your device.

Your company may be prone to such attacks, don’t be a victim. Find out how you can prevent it: https://atetsecurity.com/solutions/#atetcyberpro

Protect your company against cyber-crimes.
Consult our experts today at [email protected]