Android

BTMob Uses Custom Phishing Apps to Turn Android Users Into Remote-Controlled Fraud Victims

BTMOB has evolved beyond a conventional Android banking trojan into a turnkey fraud platform that lets criminals build branded phishing…

3 months ago

Octagon Android Bot Uses Hidden VNC and Accessibility Overlays to Steal Crypto Wallet Credentials

Octagon, a previously undocumented Android banking and cryptocurrency fraud platform marketed as malware-as-a-service by a Russian-speaking actor using the handle…

3 months ago

WindRelay Turns Android Phones Into Fake Payment Terminals for Remote Card Fraud

A newly identified Android malware family, tracked as WindRelay, is being used alongside the SpyNote remote-access trojan to convert victims’…

3 months ago

Android Banking Droppers Surge as Malware Operators Change Packaging Tactics

Android banking malware operators are increasingly relying on dropper-based packaging to evade mobile app-store controls, shifting how threats are classified…

3 months ago

Copybara Abuses Android Accessibility for Keylogging, Screen Streaming and Remote Control

Copybara is being weaponized in a new N26-themed fraud campaign in Italy that chains vishing, a real‑time phishing control kit,…

3 months ago

Flying Eagle RAT Abuses Android Accessibility Services for Keylogging, Screen Capture and Gesture Injection

A newly analyzed Android remote access trojan (RAT) dubbed “Flying Eagle” is leveraging Accessibility Services to enable large-scale surveillance, credential…

3 months ago

281 Android VPN Apps Expose Users to Traffic Leaks, Tracking and Tunnel Hijacking

A recent security analysis has revealed that a significant number of Android VPN applications, 281,281,281, expose users to serious privacy…

4 months ago

IonStack Exploit Chain Lets Hackers Root Android 17 Phones With a Single URL Click

Nebula Security has revealed a significant exploit chain known as “IonStack,” demonstrating how attackers could gain full root access on…

4 months ago

Glitch SPY RAT Abuses Android Accessibility Service for Full Device Control

An emerging Android remote-access trojan platform, tracked as Glitch SPY, that leverages a fraudulent Polish apartment-rental website to trick victims…

4 months ago

Android Malware Campaign Uses Fake Document Reader App with 100K Google Play Downloads

Android Malware Campaign Uses Fake Document Reader App with 100K Google Play Downloads tracks a fresh Anatsa campaign that abused…

4 months ago