Chameleon Android malware disables fingerprint unlock feature to steal your PIN

The Chameleon Android malware has been upgraded to disable fingerprint unlock features and steal PIN codes, according to cybersecurity researchers from ThreatFabric. The malware abuses the Android Accessibility Service, using two key changes: initiating Device Takeover fraud and changing lock screen from biometrics to PIN. The malware primarily targets devices with Android 13 or newer and has expanded its reach from Australia and Poland to the UK and Italy.