Improved capabilities and expanded targeting have been integrated into the new version of the Chameleon Android banking trojan, according to The Hacker News. Chameleon’s operators have updated the malware to exploit Accessibility Services in a bid to facilitate Device Takeover fraud on devices running on Android 13 and later, while leveraging Android APIs to evade biometric authentication, a ThreatFabric report revealed.

Source: SC Magazine