{"id":48988,"date":"2025-03-31T18:52:59","date_gmt":"2025-03-31T18:52:59","guid":{"rendered":"https:\/\/thecryptocurrencypost.net\/es\/?p=48988"},"modified":"2026-05-12T06:22:00","modified_gmt":"2026-05-12T06:22:00","slug":"crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android","status":"publish","type":"post","link":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/","title":{"rendered":"Crocodilus: El Malware que Amenaza las Wallets Cripto en Android"},"content":{"rendered":"<p data-start=\"0\" data-end=\"590\">Puntos clave de la noticia:<\/p>\n<ul>\n<li class=\"\" data-start=\"0\" data-end=\"130\">\n<p class=\"\" style=\"text-align: justify\" data-start=\"2\" data-end=\"130\"><strong>Crocodilus es un malware para Android que roba credenciales de wallets cripto<\/strong> mediante ingenier\u00eda social y t\u00e9cnicas avanzadas.<\/p>\n<\/li>\n<li class=\"\" style=\"text-align: justify\" data-start=\"131\" data-end=\"254\">\n<p class=\"\" data-start=\"133\" data-end=\"254\"><strong>Utiliza un dropper personalizado para evadir restricciones<\/strong> y obtiene control del sistema con permisos de accesibilidad.<\/p>\n<\/li>\n<li class=\"\" data-start=\"255\" data-end=\"380\">\n<p class=\"\" style=\"text-align: justify\" data-start=\"257\" data-end=\"380\"><strong>Puede interceptar claves, evadir 2FA y enga\u00f1ar a usuarios para que revelen su frase semilla<\/strong>, permitiendo el robo de fondos.<\/p>\n<\/li>\n<\/ul>\n<hr \/>\n<p class=\"\" style=\"text-align: justify\" data-start=\"0\" data-end=\"590\">Un nuevo <strong>malware dirigido a dispositivos Android<\/strong> ha sido <a href=\"https:\/\/www.threatfabric.com\/blogs\/exposing-crocodilus-new-device-takeover-malware-targeting-android-devices\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>identificado<\/strong> <\/a>por investigadores en ciberseguridad. Bautizado como <strong>Crocodilus<\/strong>, este software malicioso <strong>apunta a usuarios de wallets de <a href=\"https:\/\/thecryptocurrencypost.net\/es\/noticias-criptomonedas\/\" target=\"_blank\" rel=\"noopener\">criptomonedas<\/a> mediante t\u00e1cticas de ingenier\u00eda social y t\u00e9cnicas avanzadas de intrusi\u00f3n<\/strong>.<!--more--><\/p>\n<p class=\"\" style=\"text-align: justify\" data-start=\"0\" data-end=\"590\">Su m\u00e9todo de distribuci\u00f3n <strong>emplea un dropper personalizado que le permite sortear las restricciones de Android 13+<\/strong>, facilitando su instalaci\u00f3n sin que la v\u00edctima sospeche. Una vez en el dispositivo, <strong>solicita acceso al Servicio de Accesibilidad, lo que le otorga control sobre diversas funciones del sistema<\/strong>.<\/p>\n<h2 data-start=\"0\" data-end=\"590\">Crocodilus: \u00bfC\u00f3mo Funciona?<\/h2>\n<p class=\"\" style=\"text-align: justify\" data-start=\"592\" data-end=\"1039\">El malware <strong>puede ejecutar ataques de superposici\u00f3n para interceptar credenciales, registrar pulsaciones del teclado y activar un acceso remoto encubierto<\/strong>. Tambi\u00e9n se conecta a un servidor de comando y control, desde donde recibe instrucciones en tiempo real para desplegar sus ataques. <strong>Aunque inicialmente se detect\u00f3 en Espa\u00f1a y Turqu\u00eda, los expertos advierten que su alcance podr\u00eda expandirse a otras regiones<\/strong> conforme evoluciona su desarrollo.<\/p>\n<p data-start=\"592\" data-end=\"1039\"><img decoding=\"async\" class=\"alignnone size-full wp-image-48989\" src=\"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/malware-post-1.jpg\" alt=\"Crocodilus malware android wallets\" width=\"699\" height=\"280\" srcset=\"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/malware-post-1.jpg 699w, https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/malware-post-1-300x120.jpg 300w, https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/malware-post-1-585x234.jpg 585w\" sizes=\"(max-width: 699px) 100vw, 699px\" \/><\/p>\n<p class=\"\" style=\"text-align: justify\" data-start=\"1041\" data-end=\"1789\">Adem\u00e1s de interceptar credenciales bancarias, <strong>Crocodilus puede burlar la autenticaci\u00f3n de dos factores capturando pantallas de la aplicaci\u00f3n Google Authenticator<\/strong>. Este m\u00e9todo permite a los atacantes <strong>acceder a cuentas protegidas sin necesidad de comprometer directamente el dispositivo de la v\u00edctima<\/strong>.<\/p>\n<p class=\"\" style=\"text-align: justify\" data-start=\"1041\" data-end=\"1789\">Sin embargo, lo que lo hace especialmente peligroso es <strong>su estrategia para obtener las frases semilla de las wallets cripto<\/strong>. En lugar de extraerlas directamente, <strong>enga\u00f1a a los usuarios con un mensaje de alerta que los insta a realizar una copia de seguridad manual de sus claves en un plazo de 12 horas<\/strong>. Si la v\u00edctima sigue la instrucci\u00f3n, el malware <strong>registra el contenido mediante su sistema de registro de accesibilidad y lo env\u00eda a los atacantes<\/strong>.<\/p>\n<h3 data-start=\"1041\" data-end=\"1789\">Precauciones Ante la Proliferaci\u00f3n de Malware Avanzado<\/h3>\n<p class=\"\" style=\"text-align: justify\" data-start=\"1791\" data-end=\"2111\">Una vez que los operadores del malware obtienen la frase semilla, <strong>pueden restaurar la wallet en otro dispositivo y vaciar los fondos sin dejar rastro alguno<\/strong>. Este enfoque evita la detecci\u00f3n por parte de sistemas de seguridad tradicionales y permite que los ataques se ejecuten sin levantar sospechas inmediatas.<\/p>\n<p data-start=\"1791\" data-end=\"2111\"><img decoding=\"async\" class=\"alignnone size-full wp-image-42180\" src=\"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2023\/11\/bitcoin-wallet-post-1.png\" alt=\"bitcoin wallets\" width=\"699\" height=\"280\" srcset=\"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2023\/11\/bitcoin-wallet-post-1.png 699w, https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2023\/11\/bitcoin-wallet-post-1-300x120.png 300w, https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2023\/11\/bitcoin-wallet-post-1-585x234.png 585w\" sizes=\"(max-width: 699px) 100vw, 699px\" \/><\/p>\n<p class=\"\" style=\"text-align: justify\" data-start=\"2113\" data-end=\"2502\">El descubrimiento de Crocodilus demuestra la creciente sofisticaci\u00f3n de las amenazas dirigidas al sector cripto y la necesidad de medidas de protecci\u00f3n m\u00e1s robustas. <strong>Mantener el software actualizado, verificar la legitimidad de las aplicaciones instaladas y evitar compartir informaci\u00f3n sensible en entornos no seguros<\/strong> sigue siendo fundamental para reducir el riesgo de ataques de este tipo.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Puntos clave de la noticia: Crocodilus es un malware para Android que roba credenciales de wallets cripto mediante ingenier\u00eda social y t\u00e9cnicas avanzadas. Utiliza un dropper personalizado para evadir restricciones y obtiene control del sistema con permisos de accesibilidad. Puede interceptar claves, evadir 2FA y enga\u00f1ar a usuarios para que revelen su frase semilla, permitiendo [&hellip;]<\/p>\n","protected":false},"author":31,"featured_media":48990,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"","rank_math_description":"","rank_math_robots":[],"footnotes":""},"categories":[249,33,22,2059],"tags":[29,140,818,151,315],"class_list":["post-48988","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blockchain","category-editors-picks","category-noticias-criptomonedas","category-seguridad","tag-blockchain","tag-criptomonedas","tag-malware","tag-seguridad","tag-wallet"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Crocodilus: El Malware que Amenaza las Wallets Cripto en Android The CryptoCurrency Post ESP<\/title>\n<meta name=\"description\" content=\"Crocodilus es un malware para Android que roba credenciales de wallets cripto mediante ingenier\u00eda social y t\u00e9cnicas avanzadas.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Crocodilus: El Malware que Amenaza las Wallets Cripto en Android The CryptoCurrency Post ESP\" \/>\n<meta property=\"og:description\" content=\"Crocodilus es un malware para Android que roba credenciales de wallets cripto mediante ingenier\u00eda social y t\u00e9cnicas avanzadas.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/\" \/>\n<meta property=\"og:site_name\" content=\"The CryptoCurrency Post ESP\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-31T18:52:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-12T06:22:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/crocodilus-ftr-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"768\" \/>\n\t<meta property=\"og:image:height\" content=\"399\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Guido Battigelli\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Guido Battigelli\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Crocodilus: El Malware que Amenaza las Wallets Cripto en Android The CryptoCurrency Post ESP","description":"Crocodilus es un malware para Android que roba credenciales de wallets cripto mediante ingenier\u00eda social y t\u00e9cnicas avanzadas.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/","og_locale":"es_ES","og_type":"article","og_title":"Crocodilus: El Malware que Amenaza las Wallets Cripto en Android The CryptoCurrency Post ESP","og_description":"Crocodilus es un malware para Android que roba credenciales de wallets cripto mediante ingenier\u00eda social y t\u00e9cnicas avanzadas.","og_url":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/","og_site_name":"The CryptoCurrency Post ESP","article_published_time":"2025-03-31T18:52:59+00:00","article_modified_time":"2026-05-12T06:22:00+00:00","og_image":[{"width":768,"height":399,"url":"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/crocodilus-ftr-1.jpg","type":"image\/jpeg"}],"author":"Guido Battigelli","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Guido Battigelli","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/#article","isPartOf":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/"},"author":{"name":"Guido Battigelli","@id":"https:\/\/thecryptocurrencypost.net\/es\/#\/schema\/person\/d49dc3f15876bc4302b9c75ae9bbc7b6"},"headline":"Crocodilus: El Malware que Amenaza las Wallets Cripto en Android","datePublished":"2025-03-31T18:52:59+00:00","dateModified":"2026-05-12T06:22:00+00:00","mainEntityOfPage":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/"},"wordCount":478,"publisher":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/#organization"},"image":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/#primaryimage"},"thumbnailUrl":"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/crocodilus-ftr-1.jpg","keywords":["blockchain","criptomonedas","Malware","seguridad","wallet"],"articleSection":["Blockchain","Editor's Picks","Noticias","Seguridad"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/","url":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/","name":"Crocodilus: El Malware que Amenaza las Wallets Cripto en Android The CryptoCurrency Post ESP","isPartOf":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/#primaryimage"},"image":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/#primaryimage"},"thumbnailUrl":"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/crocodilus-ftr-1.jpg","datePublished":"2025-03-31T18:52:59+00:00","dateModified":"2026-05-12T06:22:00+00:00","description":"Crocodilus es un malware para Android que roba credenciales de wallets cripto mediante ingenier\u00eda social y t\u00e9cnicas avanzadas.","breadcrumb":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/#primaryimage","url":"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/crocodilus-ftr-1.jpg","contentUrl":"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2025\/03\/crocodilus-ftr-1.jpg","width":768,"height":399,"caption":"Crocodilus: El Malware que Amenaza las Wallets Cripto en Android"},{"@type":"BreadcrumbList","@id":"https:\/\/thecryptocurrencypost.net\/es\/crocodilus-el-malware-que-amenaza-las-wallets-cripto-en-android\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Noticias Criptomonedas","item":"https:\/\/thecryptocurrencypost.net\/es\/"},{"@type":"ListItem","position":2,"name":"Crocodilus: El Malware que Amenaza las Wallets Cripto en Android"}]},{"@type":"WebSite","@id":"https:\/\/thecryptocurrencypost.net\/es\/#website","url":"https:\/\/thecryptocurrencypost.net\/es\/","name":"The CryptoCurrency Post ESP","description":"Crypto News","publisher":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thecryptocurrencypost.net\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/thecryptocurrencypost.net\/es\/#organization","name":"The CryptoCurrency Post ESP","url":"https:\/\/thecryptocurrencypost.net\/es\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/thecryptocurrencypost.net\/es\/#\/schema\/logo\/image\/","url":"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2026\/05\/TCP-favicon-dev.png","contentUrl":"https:\/\/thecryptocurrencypost.net\/es\/wp-content\/uploads\/sites\/2\/2026\/05\/TCP-favicon-dev.png","width":280,"height":280,"caption":"The CryptoCurrency Post ESP"},"image":{"@id":"https:\/\/thecryptocurrencypost.net\/es\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/thecryptocurrencypost.net\/es\/#\/schema\/person\/d49dc3f15876bc4302b9c75ae9bbc7b6","name":"Guido Battigelli","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/a8f869ec77bbb63f6adba6c373d2d1441336eb213d20d20581946530891e8e17?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a8f869ec77bbb63f6adba6c373d2d1441336eb213d20d20581946530891e8e17?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a8f869ec77bbb63f6adba6c373d2d1441336eb213d20d20581946530891e8e17?s=96&d=mm&r=g","caption":"Guido Battigelli"},"description":"Guido is a contributor at The Cryptocurrency Post covering blockchain, cryptocurrency markets and digital asset industry updates. His work focuses on explaining relevant developments for readers interested in crypto news, technology and market context.","sameAs":["https:\/\/www.linkedin.com\/in\/guidobtg\/"],"url":"https:\/\/thecryptocurrencypost.net\/es\/author\/guido\/"}]}},"_links":{"self":[{"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/posts\/48988","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/users\/31"}],"replies":[{"embeddable":true,"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/comments?post=48988"}],"version-history":[{"count":1,"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/posts\/48988\/revisions"}],"predecessor-version":[{"id":64632,"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/posts\/48988\/revisions\/64632"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/media\/48990"}],"wp:attachment":[{"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/media?parent=48988"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/categories?post=48988"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thecryptocurrencypost.net\/es\/wp-json\/wp\/v2\/tags?post=48988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}