A newly discovered Trojan known as Alien attacks Coinbase, Blockchain.com and Luno apps on Android phones. The new type of malware is based on the infamous Cerberus Trojan that wreaked havoc on the Google Play store. By August 2020, Google Play Protect managed to almost completely destroy Cerberus.
Alien targets 226 Android apps, mostly targeting the banking sector. In addition to stealing user credentials, malware can install and remove applications from an infected device and even intercept notifications.
Choosing Coinbase and Blockchain.com as the target is quite understandable as these are the two most popular crypto apps. Why the hackers are targeting the much smaller Luno exchange without hitting other giants like Binance is still unclear.