Android malware GodFather attacks over 200 cryptocurrency applications by stealing 2FA verification codes

ChainCatcher message, the Federal Financial Supervisory Authority of Germany (BaFin) announced that a piece of Android malware named "GodFather" has attacked over 400 financial apps by stealing 2FA verification codes, including about 110 cryptocurrency trading platforms, 94 cryptocurrency wallets, and 215 banking client applications.

It is reported that Godfather runs only on Android and steals users' login data by faking a false login page, prompting victims to input their data into a monitored form. Godfather utilizes Android's Accessibility Service to gain device access and relay data. Additionally, Godfather can record screens, launch keyloggers, intercept calls containing 2FA verification codes, send text messages, and perform other operations. (Source link)