Vultur Android Banking Trojan Returns with Upgraded Remote Control Capabilities
With a plethora of new capabilities and enhanced anti-analysis and detection evasion tactics, the Android banking trojan known as Vultur has reappeared, giving its operators the ability to remotely manipulate a mobile device and obtain confidential information.
Additionally, according to a report released last week by NCC Group researcher Joshua Kamp, Vultur has begun disguising more of its malicious activity by encrypting its C2 communication, employing multiple encrypted payloads that are decrypted on the fly, and using the appearance of genuine applications to carry out its malicious actions.
Early in 2021, Vultur's destructive activities were first made public. The malware could use the accessibility services APIs on Android devices to carry out its schemes.
It has been noted...