[UPDATED] New Android Trojan Can Fake Contacts to Scam You — Meet Crocodilus

The post [UPDATED] New Android Trojan Can Fake Contacts to Scam You — Meet Crocodilus appeared first on Android Headlines.

Jun 5, 2025 - 10:50

One of the easiest ways to avoid scam calls is to ignore calls from numbers you don’t know. It sounds easy enough, right? Unfortunately, a recently-discovered Android trojan called Crocodilus is making that more complicated for users.

Beware the Crocodilus Android Trojan

A recent Threat Fabric report revealed some details about the Crocodilus Android Trojan, which was initially discovered in March 2025. One of the more concerning features of the malware is its ability to create fake contacts on infected devices. Once a device is infected with the Crocodilus Trojan, it can create a fake contact in your contacts list.

This means that when you receive a call from the number, it won’t appear as an unknown number. Instead, it will show up as a fake contact that the malware secretly created without you knowing. This is particularly dangerous, especially if the Trojan were to create a fake contact impersonating your bank or a family member.

According to Threat Fabric, “This further increases the attacker’s control over the device. We believe the intent is to add a phone number under a convincing name such as “Bank Support”, allowing the attacker to call the victim while appearing legitimate. This could also bypass fraud prevention measures that flag unknown numbers.”

The threat is going global

When initially discovered, Threat Fabric found that the malware was still in its early stages, with basic attempts at social engineering. It was also limited to a few small-scale campaigns in Turkey. However, the new report suggests that the malware is now going global.

The report says, “Another campaign is targeting Spanish users, distributing Crocodilus disguised as a browser update. The target list includes nearly all Spanish banks, clearly showing a regional focus. In addition to these targeted efforts, MTI has also observed smaller campaigns with very ‘global’ target lists, involving apps from Argentina, Brazil, Spain, the US, Indonesia, and India.”

So, what can you do to protect yourself? The usual safe practices apply here. Don’t open emails or download attachments from senders you don’t know. Also, avoid clicking on links sent in text messages or messenger apps from unknown contacts, or downloading apps or files from suspicious-looking websites. This might not protect you 100% from all attacks, but it’s a good place to start.

The post [UPDATED] New Android Trojan Can Fake Contacts to Scam You — Meet Crocodilus appeared first on Android Headlines.