BROKEWELL ANDROID MALWARE DELIVERED THROUGH FAKE TRADINGVIEW ADS

Summary from the TLDR InfoSec newsletter

There is a malware campaign that uses Meta ads offering a free version of the TradingView Premium app to spread the Brokewell malware for Android. The malicious ads direct users to a webpage that mimics TradingView's site and prompts users to download an APK file, which installs the Brokewell malware. The malware scans for crypto wallets and bank accounts, steals 2FA codes, steals accounts by overlaying fake login screens, records screens and keystrokes, steals cookies, activates the camera and microphone, tracks the device location, hijacks the default SMS apps, and provides remote control capability.