Xenomorph - explanation how new Android banking Trojan steals user banking credentials | Google Play 

ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-QxRy9sVUMQU.html

he was using adb

@@matti0449 That makes no sense since adb is not used for charging a device that is already charged. Also my device disables charging when using this because it takes up cord room. They can only transfer so much data.

I wanna too. Maybe we can search it together

@@Abdul-kn4py @TermuxSucks on Telegram

No

@@adminxds checked on virustotal total extract apk and scan it

@@ajaysoni7833 is whatsapp buisness asked for accessibility permissions?

@@adminxds the trojan is similar like xenomorph called rotexy & it,s available on Play Store whatsapp buisness it,s also binded with pics arts When you scan it on virustotal

tutorial how to analyze such apps?

@@mobilehacker Yes

Overlay permission abused

@@androdeveloper7261 You can see in the demo that trojan app requested accessibility service permission, otherwise it wouldn't able to catch events when victim application starts and inject it's own activity or draw overlay.

@@Zappexe Yes , it requested accessibility but for another reason. Accessibility is only required to automate input events on other apps. Here, It is granted "Draw over other apps" permission (Either explicitly or implicitly ) So that now app can show its fake login page on top of different apps. For detecting events, No explicit permission is needed ( Except Usage access). There is a background service continuously itrating over current activities and then detecting which is on top. ~ That's a easy approach.

To inject you use metasploit ? I've bought couple months ago an Android tablet to hack it, metasploit was useful for me while doing it (injecting malware on some minecraft clone game)

@@ancestrall794 No, I code the malware, and I inject it manually by myself

@@ancestrall794 I see, that's cool ! Iuse metasploit too, now and then.

wanna network and build a relationship, we can do great things 😈👨🏽‍💻🤟🏽

@@realjaetherobot79 hey..hey..hey! count me in! 😂😂