Cerberus (Android)

From HandWiki
Revision as of 16:36, 9 May 2022 by imported>WikiGary (add)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Short description: Android-platform based trojan


Cerberus is a trojan horse targeting Android mobile phone banking credentials.

History

It was initially spotted in June 2019.[1] It was spotted targeting Spanish and Latin American targets in September 2019.[2] Its attacks are capable of stealing Google Authenticator and SMS 2FA tokens, behavior that was spotted in February 2020.[1] In April 2020, variants has been spotted posing as COVID-19-related apps.[3]

Cerebus is capable of logging all keystrokes (including passwords) and stealing 2FA tokens from Google Authenticator and SMS messages. It also allows remote control over the device using TeamViewer.[4] It is sold as Malware as a service on underground forums.[5]

References