Medusa Strikes Again: New Android Banking Trojan Variant Targets Global Users
Medusa, the Android banking trojan, is back with a vengeance! This lightweight variant is sneakier than ever, requesting fewer permissions and evading detection. Cybersecurity experts warn it’s spreading via dedicated websites and social media, targeting banks in countries like Canada, Spain, and the US. Beware of the “4K Sports” app!

Hot Take:
Guess who’s back? Back again? Medusa’s back, tell a friend. But seriously, if your “friend” is an Android banking app with a penchant for stealing your money, maybe don’t tell anyone.
Key Points:
- Medusa, an Android banking trojan, has resurfaced with a new variant.
- The new variant is more elusive, requesting fewer permissions.
- Significant changes in command infrastructure and capabilities include setting a black screen overlay and taking screenshots.
- Five distinct botnets using Medusa have been identified, targeting countries like Canada, Spain, France, Italy, the UK, the US, and Turkey.
- Distribution methods likely include dedicated websites, social media, and phishing, rather than the Google Play Store.
Already a member? Log in here