Latest Banking Trojan news

SoumniBot malware exploits Android bugs to evade detection

A new Android banking malware named 'SoumniBot' is using a less common obfuscation approach by exploiting weaknesses in the Android manifest extraction and parsing procedure.
- Bill Toulas
- April 17, 2024
- 05:38 PM
- 0
Vultur banking malware for Android poses as McAfee Security app

Security researchers found a new version of the Vultur banking trojan for Android that includes more advanced remote control capabilities and an improved evasion mechanism.
- Bill Toulas
- March 30, 2024
- 11:56 AM
- 0
PixPirate Android malware uses new tactic to hide on phones

The latest version of the PixPirate banking trojan for Android employs a previously unseen method to hide from the victim while remaining active on the infected device even if its dropper app has been removed.
- Bill Toulas
- March 13, 2024
- 02:13 PM
- 1
Hackers abuse Google Cloud Run in massive banking trojan campaign

Security researchers are warning of hackers abusing the Google Cloud Run service to distribute massive volumes of banking trojans like Astaroth, Mekotio, and Ousaban.
- Bill Toulas
- February 21, 2024
- 04:07 PM
- 0
Anatsa Android malware downloaded 150,000 times via Google Play

The Anatsa banking trojan has been targeting users in Europe by infecting Android devices through malware droppers hosted on Google Play.
- Bill Toulas
- February 19, 2024
- 08:34 AM
- 1
New ‘Gold Pickaxe’ Android, iOS malware steals your face for fraud

A new iOS and Android trojan named 'GoldPickaxe' employs a social engineering scheme to trick victims into scanning their faces and ID documents, which are believed to be used to generate deepfakes for unauthorized banking access.
- Bill Toulas
- February 15, 2024
- 03:00 AM
- 2
Police disrupt Grandoreiro banking malware operation, make arrests

The Federal Police of Brazil and cybersecurity researchers have disrupted the Grandoreiro banking malware operation, which has been targeting Spanish-speaking countries with financial fraud since 2017.
- Bill Toulas
- January 30, 2024
- 10:46 AM
- 0
Ten new Android banking trojans targeted 985 bank apps in 2023

This year has seen the emergence of ten new Android banking malware families, which collectively target 985 bank and fintech/trading apps from financial institutes across 61 countries.
- Bill Toulas
- December 14, 2023
- 02:40 PM
- 0
FjordPhantom Android malware uses virtualization to evade detection

A new Android malware named FjordPhantom has been discovered using virtualization to run malicious code in a container and evade detection.
- Bill Toulas
- November 30, 2023
- 09:00 AM
- 0
Android malware Xenomorph runs new campaign targeting the U.S.

After several months of operational hiatus, Xenomorph Android malware has launched a new campaign that targets users in the United States, Canada, Spain, Italy, Portugal, and Belgium.
- Bill Toulas
- September 25, 2023
- 11:24 AM
- 0
New Android MMRat malware uses Protobuf protocol to steal your data

A novel Android banking malware named MMRat utilizes a rarely used communication method, protobuf data serialization, to more efficiently steal data from compromised devices.
- Bill Toulas
- August 29, 2023
- 02:04 PM
- 0
Anatsa Android trojan now steals banking info from users in US, UK

A new mobile malware campaign since March 2023 pushes the Android banking trojan 'Anatsa' to online banking customers in the U.S., the U.K., Germany, Austria, and Switzerland.
- Bill Toulas
- June 26, 2023
- 01:21 PM
- 1
New Horabot campaign takes over victim's Gmail, Outlook accounts

A previously unknown campaign involving the Horabot botnet malware has targeted Spanish-speaking users in Latin America since at least November 2020, infecting them with a banking trojan and spam tool.
- Bill Toulas
- June 01, 2023
- 04:54 PM
- 1
Xenomorph Android malware now steals data from 400 banks

The Xenomorph Android malware has released a new version that adds significant capabilities to conduct malicious attacks, including a new automated transfer system (ATS) framework and the ability to steal credentials for 400 banks.
- Bill Toulas
- March 10, 2023
- 05:24 AM
- 0
Over 1,800 Android phishing forms for sale on cybercrime market

A threat actor named InTheBox is promoting on Russian cybercrime forums an inventory of 1,894 web injects (overlays of phishing windows) for stealing credentials and sensitive data from banking, cryptocurrency exchange, and e-commerce apps
- Bill Toulas
- February 01, 2023
- 05:30 PM
- 0
New 'Hook' Android malware lets hackers remotely control your phone

A new Android malware named 'Hook' is being sold by cybercriminals, boasting it can remotely take over mobile devices in real-time using VNC (virtual network computing).
- Bill Toulas
- January 19, 2023
- 06:30 PM
- 1
SpyNote Android malware infections surge after source code leak

The Android malware family tracked as SpyNote (or SpyMax) has had a sudden increase in detections in the final quarter of 2022, which is attributed to a source code leak of one of its latest variants, known as 'CypherRat.'
- Bill Toulas
- January 05, 2023
- 10:17 AM
- 0
GodFather Android malware targets 400 banks, crypto exchanges

An Android banking malware named 'Godfather' has been targeting users in 16 countries, attempting to steal account credentials for over 400 online banking sites and cryptocurrency exchanges.
- Bill Toulas
- December 21, 2022
- 03:00 AM
- 0
Android file manager apps infect thousands with Sharkbot malware

A new collection of malicious Android apps posing as harmless file managers had infiltrated the official Google Play app store, infecting users with the Sharkbot banking trojan.
- Bill Toulas
- November 22, 2022
- 11:04 AM
- 0
Android malware droppers with 130K installs found on Google Play

A set of Android malware droppers were found infiltrating the Google Play store to install malicious programs by pretending to be app updates.
- Bill Toulas
- October 28, 2022
- 06:00 AM
- 0