Chameleon Trojan

 

What is the Chameleon Trojan?

Why In News?

    A new version of the ‘Chameleon Trojan’ malware has been discovered by security researchers, capable of disabling biometric authentication methods such as fingerprint and face unlock to steal a phone’s PIN.

About the Chameleon Trojan:

    It is a malware that has the ability to disable biometric authentication methods, including fingerprint and face unlock, to sneakily access sensitive information.

Working:

    The malware strategically attaches itself to legitimate Android applications, such as the widely used Google Chrome, effectively avoiding immediate detection.

    Operating discreetly in the background, Chameleon Trojan can disable biometric security measures, specifically targeting PINs.

    The malware bundles are reportedly undetectable during runtime, enabling it to outsmart Google Protect alerts and circumvent security software on the compromised device.

    This stealthy approach allows the Trojan to operate without any worries, evading immediate countermeasures.

    Its modus operandi varies depending on the Android version.

    Once active, Chameleon Trojan steals on-screen content, elevates its own permissions, and can even use gestures to capture PINs and passwords entered by users to unlock their devices.

    The stolen PIN is then employed to unlock the device in the background, enabling the malware to access sensitive information such as credit card passwords and login credentials.

    The malware also collects information on users’ app usage habits, launching attacks when the device is least likely to be in use.

Solution:

    To protect against this malware, users are advised to avoid unofficial app sources, refrain from enabling the Accessibility service for unknown apps, run regular security scans, and keep Google Play Protect enabled.