Incredible! It seems that the world of cryptocurrencies has become even more complicated. I just read about a new threat that is lurking around: it's a malware called Crocodilus, and the most worrying thing is that it is spreading like wildfire, and it’s going straight for cryptocurrency users!
This little bug 🤬 is a super sneaky banking Trojan that attacks our Android phones. Basically, what it does is trick us. Imagine this: you are using your banking or cryptocurrency app, and suddenly, Crocodilus overlays a fake screen, exactly like the original! The idea is for us to fall into the trap and enter our credentials, handing them directly to the hackers. It's like someone stole the key to your house without you realizing it.
But it doesn’t stop there. This malware is so sophisticated that it can take full control of your device, record everything you type (yes, including your passwords and even the seed phrases for your crypto wallets), and to top it off, it erases all its tracks! This way, cybercriminals gain access to your seed phrase and, before you realize it, your funds disappear. At first, it was seen a lot in Turkey and Spain, but now it's everywhere, from Europe to South America.
How does this get transmitted? Well, it's almost always because we download things from strange sites, websites that look legitimate but aren’t, or even through those deceptive promotions that reach us via social media or SMS. Honestly, it's a nightmare. That's why I believe the most important thing is to be super cautious. My advice is to always download your apps from official sites, enable two-step verification on everything you can, and please, never store your seed phrases in digital format! If you can, use hardware wallets or those that require multiple signatures to confirm transactions; they provide an extra level of security that is very beneficial.