New Android Banking Trojan Sturnus: The Cybercriminal’s Swiss Army Knife for Financial Fraud

Sturnus, a new Android banking trojan, swoops in like a European starling, mimicking encrypted messages and stealing credentials. It’s a digital Houdini, staging fake login screens and masquerading as software updates. With its ability to capture keystrokes and monitor device activity, it’s a malware maestro orchestrating financial fraud across Europe.

Pro Dashboard

Hot Take:

Watch out, Android users! There’s a new villain in town, and it’s not just after your passwords—it’s after your entire device! Meet Sturnus, the banking trojan with a knack for impersonation and a flair for theatrics. If your phone starts acting like a Broadway star, maybe it’s time to check for this digital diva!

Key Points:

  • Sturnus is an Android banking trojan capable of full device takeover and credential theft.
  • It bypasses encrypted messaging by capturing content directly from the device screen.
  • The malware can stage overlay attacks with fake login screens to harvest credentials.
  • Targets financial institutions in Southern and Central Europe with region-specific tactics.
  • Features include keystroke capturing, UI interaction recording, and device activity monitoring.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?