Snowblind malware:

Current Context : A new banking malware called ‘Snowblind’ is targeting Android users to steal banking credentials.

ABOUT

• It is a new Android malware that uses a built-in Android security feature to bypass anti-tamper mechanisms and steal banking credentials.
• It exploits a built-in security feature to bypass anti-tamper protection in apps handling sensitive information.
• It works by repacking an app so it is unable to detect the use of accessibility features that can be used to extract sensitive information like login credentials and get remote access to the app.
• It exploits a feature called ‘seccomp’, which stands for ‘secure computing’.