November 21, 2019 By Tara Seals
The mobile malware, which incorporates Anubis source code, could evolve into a fully fledged spyware in the future.
A new custom mobile banking malware for Android, dubbed Gnip, has emerged onto the scene, and its authors have taken an aggressive development track: Gnip appears to have been cobbled together in under five months, with four different variants already circulating — including a sample released in November that includes part of the Anubis trojan’s source code.
Though Gnip was spotted for the first time at the end of October 2019,”it dates back to June 2019 [and] is still under active development…first built from scratch but has been enriched through regular updates, the last of which did include some code copied from the infamous Anubis banking trojan,” according to research from ThreatFabric. “This [indicates] that its author is cherry-picking the most relevant functionalities for its malware.”