US EditionAndroid malware Crocodilus adds fake contacts to spoof trusted callers
- ThreatFabric researchers reported in late March 2025 that the Crocodilus Android banking trojan now adds fake contacts to victims' phones to spoof trusted callers.
- Crocodilus spreads via malicious Facebook ads targeting users mainly over age 35 in Europe, South America, Asia, and expanding worldwide.
- The malware displays fraudulent login overlays, bypasses Android 13 security, and uses contact spoofing labeled as "Bank Support" to trick users into answering scam calls.
- Each Facebook ad was viewed over 1,000 times but stayed online only 1-2 hours, indicating well-resourced attackers rapidly deploying evasion-focused updates.
- This evolving tactic could bypass fraud filters and increase data theft risks, suggesting users avoid untrusted downloads and remain cautious of suspicious contacts or calls.
11 Articles
11 Articles
Researchers from the Dutch company ThreatFabric reported the expansion of a new three-bank for Android, called Crocodilus.
Scam calls evolve: Crocodilus malware adds fake contacts to Android phones
Security researchers from Threat Fabric recently outlined a new form of malware targeting banking information on Android phones. Although the hacking campaign's objective isn't unusual, the report describes some innovative tactics.Read Entire Article
The person affected is not safe even if they are apparently being called by someone who is in their contact list: the malware called Crocodilus can also add fake contacts to their phone.
A new Android malware is currently causing concern in the security branch: The malware called Crocodilus has been recently further developed and can now create sophisticated contacts on infected smartphones to build on them. (Read more)
New Android Trojan Can Fake Contacts to Scam You — Meet Crocodilus
One of the easiest ways to avoid scam calls is to ignore calls from numbers you don’t know. It sounds easy enough, right? Unfortunately, a recently-discovered Android trojan called Crocodilus is making that more complicated for users. Beware the Crocodilus Android Trojan A recent Threat Fabric report revealed some details about the Crocodilus Android Trojan, which was initially discovered in March 2025. One of the more concerning features of the…
Coverage Details
Bias Distribution
- 100% of the sources are Center
To view factuality data please Upgrade to Premium
Ownership
To view ownership data please Upgrade to Vantage
