Sure, your fingerprint is one of a kind, but it might not keep your personal information safe any longer. That's because a new version of the Chameleon Android malware reportedly allows bad actors to bypass your fingerprint feature to steal your PIN.
According to researchers with ThreatFabric, the malware effectively tricks people into turning on accessibility services, which then allows attackers to change the phone from a biometric to a PIN lock. It does this, according to Bleeping Computer, by posing as legitimate Android apps and then displaying an HTML page that asks potential victims to turn on accessibility settings. This allows attackers to bypass protections, including fingerprint unlock. Then, when a victim uses the PIN to log-in instead of a fingerprint, the attackers are able to steal that PIN or any password.
People should be careful to make sure if they use an app, especially a banking app, that it is legitimate.
"These enhancements elevate the sophistication and adaptability of the new Chameleon variant, making it a more potent threat in the ever-evolving landscape of mobile banking trojans," ThreatFabric said.
Bleeping Computer noticed the primary distribution method for the malware was Android package files (APKs) from unofficial sources.
So be careful out there. Even your unique fingerprint might not be enough to protect you.
TopicsAndroidPrivacy
(责任编辑：休閑)
This German startup wants to be your bank (without being a bank)
Live out your Sailor Moon cosplay fantasies with her official phone and selfieAll the best family photos from Pippa Middleton's decadent weddingWeather forecasts are imperfect. Under Trump's budget, they'll be nearly impossibleU.S. pole vaulter skids to a halt for national anthemTesla's rumored P100D could make Ludicrous mode even more Ludicrous
A Tesla Model S P100D begs the question: What's more Ludicrous than Ludicrous?Right now, the biggest
...[详细]EU to tech companies: You're going to have to start taking responsibility for hate speech
In a move that would mark a major turning point for how governments regulate what is posted on onlin
...[详细]Live out your Sailor Moon cosplay fantasies with her official phone and selfie
Let your love for all things 。 kawaii 。shine bright, with the official Sailor Moon phone and its match
...[详细]Check out this exclusive art for the new Spider
Sure, Marvel fans are excited for
。 Spider-Man: Homecoming 。to hit theaters in July. But there's one m
...[详细]This 'sh*tpost' bot makes terrible memes so you don't have to
The internet is awash in trashy memes just waiting for your late-night retweet spree. Why waste prec
...[详细]FaceApp changes old world art models from stoic to stoked
It's such an obvious idea, but it took a professional artist to think of it: use the FaceApp to give
...[详细]Dad creates adorable children's book after daughter asks why no characters look like her
When four-year-old Madison turned reading time into an inquisition about why she was Chinese, unlike
...[详细]Weather forecasts are imperfect. Under Trump's budget, they'll be nearly impossible
If President Donald Trump gets his way, weather forecasts in America will become less accurate over
...[详细]How Hyperloop One went off the rails
In December 2014, an engineer with the unlikely name Brogan BamBrogan was in the driveway of his cla
...[详细]560 million reasons to change your passwords right now
Hello. Stop reading this story and go check just how compromised your email accounts are. 。 Once you'
...[详细]MashReads Podcast: What makes a good summer read?
Of course LaVar Ball finally said something offensive