Malware “Chameleon” that steals PIN codes and passwords disguised as Android version of Chrome is discovered

ThreatFabric has reported a new malware dubbed Chameleon, which disguises as the Android version of Chrome and steals unlock PIN codes and passwords. It can bypass biometric authentication and guides users to disable security features on the Android 13 and later versions. The malware gains permission to operate freely, enabling the theft of passcodes. Its sophistication has increased since its discovery in January 2023.