Crocodilus Mobile Malware: Evolving Fast, Going Global

[avp2306]

I always find it interesting to see how scammers/hackers use different techniques to lure victims into giving up their privacy.
While many times it is the victims fault the other times the attackers are just too smart.
In this case, since the malware was shown in the form of a bonus, it clearly indicates that they were targeting people who were greedy.
People should understand one basic fact that nobody would give away money for free.

When you look at the situation, scammers are actually quite creative.If they had invested that time into some legitimate job or started a legitimate business, i believe many of them would be very successful.
Unfortunately, there are people who choose to build their path through deception, but when they get caught, they face serious consequences.In this case, they primarily targeted naive elderly people, who unfortunately ended up as victims of such an attack.

If becoming successful is easy as that for sure that there's no people would think about scamming people.

But success for legitimate matters takes time that's why maybe those criminals want to find easy way to gain quick richest and they can do that if these people can compromised lots of people or hit big whales on bad schemes they are doing.

Also since we can't please those criminal to stop doing those crimes we must make sure that we are aware and better not to click or trust any random things we see online.

[Patikno]

It's really stupid to download any resource from social media, some mistakes are needed to become the victim without pity. As an investor aside from that, with the current modern advancement, everyone should be current with security dominance. Scammers are not going to take it lightly when trying to defraud their victims, if anyone fails to dodge the threat, then they become the victim. Telegram and Facebook are the environment for scammers, some people still go ahead and download files from Telegram, that's carelessness not ignorance.

Yes, this is what everyone needs to pay attention to, that it is better not to easily download from unknown sources, or even install it on the device, this is very dangerous because there are so many traps from the file. However, I think that most of the victims who are lured by the trap are people who have little knowledge of technology, because some time ago in my country there was also a similar case where there was a chain message through an application that had a green icon, and the message contained a party invitation, and it is true that most of the victims are people who are not tech-savvy, one of them is my friend who without thinking did the installation on the file, and as a result he lost some of the electric money he had.

[Majestic-milf]

Most recent versions of android are trying to be more secured concerning malwares like this. However the honest truth is that it still falls back to the user of that particular device. For a malware to prove effective on a device permissions has to be granted and where this is a downside on this kind of malwares is that they can most times bypass those permissions. Sometimes the user carelessly grant these permissions without reading and they can split most of the time to batch files so an uninstall isn't effective sometimes.

Not all would seek your permission. I was downloading a movie yesterday and there was an app that began downloading even without me granting permission so because I didn't need the app, I had to quickly stop it. Let's assume it was a malware that would not really affect what I was doing, who knows if I would have turned a blind eye to it? This could be the same case for other android users who may not really think too much such things if they pop on their phones as long as to them it would not affect their social media or others but they fail to understand that their ignorance or nonchalance could prove costly.
 I've always said it that nothing good comes easy so when such offers come up and it requires that you download or click on a link, alarm bells begin to ring in my head and I don't think too much or give it any attention.

[DYING_S0UL]

Most recent versions of android are trying to be more secured concerning malwares like this. However the honest truth is that it still falls back to the user of that particular device. For a malware to prove effective on a device permissions has to be granted and where this is a downside on this kind of malwares is that they can most times bypass those permissions. Sometimes the user carelessly grant these permissions without reading and they can split most of the time to batch files so an uninstall isn't effective sometimes.

You would be shocked to see how many permissions a app can involve itself with without the users knowledge. Forget apps from unknown sources, even apps downloaded through play store has this kind of practices. They askes for tons of permission for some of them doesn't even make sense to begin with. This is why users always should check which permission a app can ask and be caution when granting such permissions. It's wild how much access a basic calculator app wants these days, I mean why would you even need contact, location, microphones permission just to add 2+2? Lol..

[Zoomic]

I always find it interesting to see how scammers/hackers use different techniques to lure victims into giving up their privacy.
While many times it is the victims fault the other times the attackers are just too smart.
In this case, since the malware was shown in the form of a bonus, it clearly indicates that they were targeting people who were greedy.
People should understand one basic fact that nobody would give away money for free.

When you look at the situation, scammers are actually quite creative.If they had invested that time into some legitimate job or started a legitimate business, i believe many of them would be very successful.
Unfortunately, there are people who choose to build their path through deception, but when they get caught, they face serious consequences.In this case, they primarily targeted naive elderly people, who unfortunately ended up as victims of such an attack.

Scammers are not lazy people; they are very smart and creative. However, honest earnings won’t give them the kind of wealth they desire, so they would rather scam people to get what they want. They are all suffering from the get-rich-quick syndrome. They are mentally sick and need rehabilitation to recover from their condition.

Like everyone else in the crypto space, people should always stay alert and read every update that talks about scams, as that is one way to stay safe. We can’t really tell what these scammers are planning next.

[Smartvirus]

It was also reported that the app is getting modified.

According to Facebook’s ad transparency data, these advertisements were live for just 1–2 hours, but each was shown more than a thousand times. The majority of viewers were over 35, indicating a focus on a solvent audience.

Upon clicking the "Download" button, users were redirected to a malicious site that delivered the Crocodilus dropper, capable of bypassing Android 13+ restrictions.

People need to read more about this malware.

https://www.threatfabric.com/blogs/crocodilus-mobile-malware-evolving-fast-going-global

CEOs of social media and some of these internet platforms advertising these aids needs to step up the game and start being a little more responsible for the actions that might emanate from their site. Like, what is this! People can’t just surf the web without having these ads pop up here and there no more and then, when you happen to click, you get redirected and boom, your device is infiltrated with malware, it just doesn’t make sense.

These platforms need to be a little more responsible for the ads they bring up, have a team that checked them out periodically and take reviews on these ads too for swift action.

[pawanjain]

If becoming successful is easy as that for sure that there's no people would think about scamming people.

But success for legitimate matters takes time that's why maybe those criminals want to find easy way to gain quick richest and they can do that if these people can compromised lots of people or hit big whales on bad schemes they are doing.

Also since we can't please those criminal to stop doing those crimes we must make sure that we are aware and better not to click or trust any random things we see online.

That is so true. The unemployment rate is increasing every year and this could be a leading factor why we see so many scams happening around the world.
While its true that these scammers could have used their skills at the right places to get a good job but on the other hand we also see rising toxic work culture.
Although it doesn't mean one should go ahead start scamming people, we can surely try harder on our end find better ways of earning money.

Yet, we will still see scams happening around and the best way to prevent ourself from being a victim is to stay updated with the latest news and scams.
Be aware and keep spreading awareness of such scams and how to prevent it.