Gustuff Android banking trojan targets 125+ banking, IM, and cryptocurrency apps

[silversurfer]

A new Android banking trojan is starting to gain popularity on the cybercriminal underworld. Named Gustuff, the trojan has been around for almost a year, during which time it slowly received updates over updates, becoming a powerhouse in terms of features and targeting capabilities.
 
This Android banking trojan now joins the ranks of similar top-tier threats, such as Anubis, Red Alert, Exobot, LokiBot, and BankBot.
 
According to an analysis of Gustuff shared with ZDNet by cyber-security firm Group-IB, Gustuff can phish credentials and automate bank transactions for over 100 banking apps and 32 cryptocurrency apps.
 
Targets include known banks such as Bank of America, Bank of Scotland, J.P.Morgan, Wells Fargo, Capital One, TD Bank, and PNC Bank, but also cryptocurrency apps such as BitPay, Cryptopay, Coinbase, and Bitcoin Wallet.
 
In addition, the trojan can also phish credentials for various other Android pyment and messaging apps, such as PayPal, Western Union, eBay, Walmart, Skype, WhatsApp, Gett Taxi, Revolut, and others.

SOURCE: https://www.zdnet.com/article/gustuff-an...ency-apps/