Farcaster

🚨 SlowMist Security Alert🚨

The Android banking trojan #Crocodilus is now targeting crypto users and banking apps globally after recent upgrades.

⚠️ Key threats:

🔹Spreads via fake browser updates in Facebook ads
🔹Steals login credentials using overlay attacks
🔹Extracts https://t.co/5hwjmq2WeW

安卓手机上这个盗助记词/私钥的技巧，许多人大概率忽略了，如果细看还是值得警惕的。

不需要 root 权限的情况下，如果你安装了个恶意 App，恶意 App 请求无障碍权限 (AccessibilityService)，你打开钱包 App，当屏幕上出现助记词/私钥信息时，恶意 App 会通过 Accessibility

Cos(余弦)😶‍🌫️

https://x.com/evilcos/status/1930169265384222934?s=19