BlockBeats News, March 31st, According to BleepingComputer report, researchers from the security company ThreatFabric stated that a new type of malware named Crocodilus can steal Android users' wallet mnemonic. This malware spreads through a proprietary driver and bypasses the security protection of Android 13 (and higher versions), so installing the malware will not trigger Play Protect.
The malware uses screen overlay to show users a false warning, claiming that they need to back up the wallet mnemonic in the settings within 12 hours, or they may risk losing access to the wallet.