Crocodilus malware draining crypto wallets on Android

Crocodilus malware primarily affects Android users in Turkey and Spain, employing social engineering tactics to trick victims into revealing their wallet seed phrases. It disguises itself as crypto apps and bypasses Android security through a proprietary dropper.

ThreatFabric emphasizes the importance of downloading apps solely from the Google Play Store, cautioning against APK downloads from malicious sites or third-party stores. Users must remain vigilant to safeguard their cryptographic assets.