Security researchers have discovered a new variant of the Xenomorph banking trojan that is targeting over 35 financial institutions in the United States. The new variant, which was first observed in September 2023, is more sophisticated than previous versions of the Xenomorph trojan and is more difficult to detect.
Xenomorph is a type of malware that steals sensitive financial information from victims, such as login credentials, credit card numbers, and Social Security numbers. The trojan can be installed on devices through phishing attacks or by exploiting vulnerabilities in software and hardware.
Once installed, Xenomorph can monitor a victim’s online activity and steal their financial information when they log into their bank accounts or other financial websites. The trojan can also steal data from mobile devices, such as smartphones and tablets.
The new variant of Xenomorph is particularly dangerous because it is able to bypass many traditional security measures, such as antivirus software and sandboxing. The trojan also uses a variety of techniques to evade detection, such as obfuscating its code and using encryption.
Security researchers are still learning about the new variant of Xenomorph, but they have identified a few key features: