# Android Banking Malware Bypasses Fingerprint Lock

> Chameleon malware steals PINs by bypassing Android security.
- Title: Android Banking Malware Bypasses Fingerprint Lock · Fox News
- Summary: Chameleon malware steals PINs by bypassing Android security. Chameleon Android banking malware bypasses fingerprint locks to steal PINs and bank data.
- Keywords: chameleon malware, android security, fingerprint lock, pin theft, banking apps, malware bypass, android 13, restricted settings, antivirus software, identity theft, technology, news
- Source: Fox News — https://foxnews.com/tech/how-to-protect-your-android-from-banking-threat-bypasses-fingerprint-unlock-steals-your-pin
- Author: Kurt Knutsson, CyberGuy Report
- Published: 2023-12-30T00:00:00+00:00
- Read time: 1 min
- Topics: chameleon malware, android security, fingerprint lock, pin theft, banking apps, malware bypass, android 13, restricted settings, antivirus software, identity theft, technology, news
## What is Chameleon malware?
Chameleon is a banking trojan that mimics legitimate apps to trick users into granting permissions.

> The malware is known as the Chameleon Android banking trojan
## How does it bypass security?
It bypasses Android 13's restricted settings feature by tricking users into granting permission without consent.

> The malware can use a clever technique to trick you into granting it permission to use the restricted setting feature without your consent
## Steals PIN through fake lock screen
The malware displays a fake lock screen asking for PIN entry to capture credentials and access banking apps.

> The malware will display a fake lock screen and ask you to enter your PIN
## Uses Zombinder platform
Chameleon attaches to innocent apps via Zombinder to run tasks without user detection.

> Chameleon uses a platform called Zombinder to attach the malware to innocent apps
## Steals money and data
It captures PINs to access banking apps, send money to hackers, or purchase goods without user knowledge.

> The malware can send money to the hackers’ accounts or purchase online goods without your knowledge
## How to protect your device
Use official app stores, update Android, install antivirus software, and avoid sideloading apps.

> The biggest way to protect yourself is only using legitimate app stores
## Change passwords from another device
Use a different device to change passwords to avoid hackers seeing new credentials.

> You should not do this on your infected device, because the hacker might see your new passwords
## Monitor accounts for suspicious activity
Check online accounts and transactions regularly for unauthorized activity or fraud.

> You should check your online accounts and transactions regularly for suspicious or unauthorized activity
## Use identity theft protection
Identity theft protection services track personal information and notify of suspicious activity.

> These services can track your personal information, such as your home title, Social Security Number (SSN), phone number and email address
## Contact banks and credit card companies
Report compromised bank or credit card information to freeze or cancel accounts.

> You should contact your bank and credit card companies and inform them of the situation
## Alert contacts of suspicious activity
Warn contacts about phishing messages or impersonation attempts from compromised accounts.

> You should alert your contacts and warn them not to open or respond to any messages from you that seem suspicious
## Restore device to factory settings
Erase all data and settings to remove malware, but back up important data first.

> You can restore it to factory settings to make sure your device is completely free of malware
## Key takeaway

Chameleon Android banking malware bypasses fingerprint locks to steal PINs and bank data.