The Internet reported that SlowMist issued a security alert. After the recent upgrade, the Android banking Trojan "Crocodilus" has attacked cryptocurrency users and banking applications around the world. The main threats include: spread through fake browser updates in Facebook ads; Use override attacks to steal login credentials; extract encrypted wallet mnemons and private keys; inject fake "bank support" numbers into contact lists; and malware as a service: Rental ($100 -300 per attack). Remind users to avoid unknown app updates and advertising links.