Tag: android malware
31 articles
Hirudo Trojan Exploits Patched Banking Apps to Evade Security Checks
Meet Hirudo, a sneaky Trojan that's exploiting patched banking apps to slip past security checks and wreak havoc on unsuspecting users. This malicious mastermind combines credential theft, device takeover, and even camera capture to pull off its dastardly heists.
Android Phones Expose Users to Malware-Backed Residential Proxy Networks
Malware lurking in the firmware of low-cost Android phones has been found communicating with the same servers as 13 malicious apps on Google Play, putting users at risk of being roped into a massive residential proxy network. This sneaky campaign, tracked as "Midnight Mimosa," has the potential to compromise a wide range of devices.
Android Phones Ship with Embedded Malware
Thousands of low-cost Android phones from reputable manufacturers have been secretly harboring malware for two years, with affected devices found in over 150 countries worldwide. This sneaky malware, dubbed "Midnight Mimosa," has been embedded in the firmware of devices from brands like Doogee and Cubot, allowing it to rack up fraudulent impressions and clicks without detection.
RemControl Trojan Targets Android Users with Accessibility Exploit
Beware: the RemControl Trojan is targeting Android users with a sneaky accessibility exploit, putting over 30 major banks and their customers at risk across six countries. It starts with a clever fake Google Play Store page trick, disguising itself as a harmless app update.
AI Search Poisoning Targets Major Companies
This sneaky malware uses AI to superimpose phishing overlays on real banking apps, allowing hackers to remotely control infected devices and siphon off sensitive info. It’s a stealthy attack that’s already targeted major companies, using fake Google Play pages and social media ads to spread.
RemControl Malware Targets European, Canadian Banking Users
Beware of a sneaky new Android malware called RemControl that's targeting banking users in Europe and Canada through clever phishing tactics and fake Google Play pages. This malware-as-a-service platform is spreading rapidly through fake stores, malicious ads, and tracking pixels.
RatHat Malware Exploits ADB to Maintain Shell Access on Android Devices
Meet RatHat, a sneaky Android malware that uses Accessibility tricks and ADB exploits to break free from the sandbox and gain shell-level control on your device. By combining these tactics, RatHat can secretly pair with your device and run malicious daemons with elevated privileges.
RatHat Malware Exploits AI to Automate Android Device Control
Meet RatHat, a sneaky new Android malware that uses AI to take control of your device, navigating and interacting with it in real-time - making it a formidable foe for security software. This clever malware is spread through cleverly disguised ads, texts, and fake websites, and may even have ties to Chinese threat actors.
Chinese Malware RatHat Exploits AI to Harvest Financial Data on Android Devices
Meet RatHat, a sneaky Chinese malware that's using AI to secretly harvest financial data from Android devices - and traditional security controls just can't keep up. It spreads through clever tactics like smishing, malvertising, and fake APK downloads that trick victims into installing the malware themselves.
Anthropic Exposes AI Abuse by Hackers Linked to Russia, China
Anthropic uncovered a massive AI-powered operation by hackers linked to Russia and China, who used a sophisticated pipeline to download and scan 1.8 million Android apps for sensitive secrets. This alarming breach highlights the growing threat of AI abuse in cyber attacks.
Android Malware Mantax Otax Encrypts Devices, Steals Data, and Harasses Victims
Beware of Mantax Otax, a sneaky Android malware that's encrypting devices, swiping sensitive data, and even harassing victims - all thanks to clever tricks by Indonesian operators who are using sideloaded APKs to spread the threat.
MantaxOtax Malware Targets Android Devices with Ransomware and Spyware
Meet MantaxOtax, a sneaky malware that's putting Android users on high alert with its potent mix of ransomware and spyware, allowing hackers to hold your device hostage and snoop on your personal life. This hybrid threat can encrypt your files, track your location, and even siphon off sensitive info like contacts, call logs, and gallery content.
Malware Targets Automotive Head Units
Kaspersky uncovered a surprising new threat in June 2026: a piece of Android malware that targets the Android-based head units found in many cars, using a legitimate system app called TWCore as its unwitting accomplice. This sneaky malware piggybacks on TWCore's update process to spread its reach.
Malware Targets Android Car Systems Through Built-In Updaters
Malware is sneaking into Android car systems through built-in updaters, allowing hackers to wreak havoc on unsuspecting drivers. This sneaky attack was recently discovered by Kaspersky researchers, who linked it to a notorious ad-fraud operation called BADBOX.
Manic Android Malware Exploits Nearby Devices for Data Exfiltration
Meet Manic, a sneaky new Android malware that's using a clever fallback strategy to steal sensitive data from nearby devices, even when they have no internet connection. It captures credentials and in-app secrets by combining spyware, banking fraud, and remote-control capabilities into one powerful payload.
Malware Combo Targets Android Users With Loans, Credit Card Theft
In just 13 minutes, a sophisticated scam combining malware and social engineering tricked Android users into handing over their accounts and credit card info, with the thieves monetizing stolen cards in real time. The attack started with a convincing phone call from someone posing as a bank employee, leading victims to unwittingly download a remote administration tool masquerading as a legitimate app.
RedHook Android Malware Exploits Wireless ADB for Shell Access
Meet RedHook, a sneaky Android malware that's taking advantage of Wireless ADB and Accessibility features to gain shell-level control over your device - and it can be controlled remotely with 53 server-issued commands. This clever malware tricks victims into granting permissions, then takes control, making it a serious threat to your digital security.
NetNut Exposed in Massive Popa Botnet Operation
Meet Popa, a sneaky Android-based plugin that's been secretly infiltrating over 1.4 million internet addresses via unofficial streaming apps and set-top devices, researchers have uncovered. This stealthy operation is linked to the notorious Vo1d botnet family, which has been targeting vulnerable Android TV boxes.
Android Malware NFCShare Targets Europe Banks via GitHub Updates
Malicious actors are using GitHub to spread new variants of the NFCShare Android malware, disguising them as banking app updates to target customers of European banks. Victims are first lured into downloading the malware through phishing sites that mimic real banks, where they're prompted to install a fake update.
ESET Exposes BTMOB Android Malware Service
Meet BTMOB, a sneaky Android malware that's being sold as a subscription service - think $700/month or a one-time $5,000 fee for a lifetime license - making it easy for anyone to become a cyber threat actor. This malware-as-a-service platform even comes with a user-friendly APK builder, requiring zero coding skills.
Android Malware Campaign Silently Invoices Users via Fake Apps
Malware hidden in nearly 250 fake Android apps has been silently invoicing users for premium services, with victims largely unaware of the charges. The sneaky campaign, dubbed Premium Deception, targeted subscribers in several countries, including Malaysia, Thailand, Romania, and Croatia, over a 10-month period.
Malicious Android Apps Fuel 659M Daily Ad Fraud Bid Requests
Meet Trapdoor, a massive ad fraud scam driven by 455 malicious Android apps that generated a whopping 659 million daily bid requests at its peak, all while hiding in plain sight as harmless utilities like PDF viewers and file managers. These fake apps tricked users into installing malware, unleashing a hidden ad fraud operation controlled by 183 threat actor-owned domains.
Mobile Malware Attacks Drop, Banking Trojans Surge.
Mobile malware attacks may be on the decline, but banking Trojans are surging, with over 162,000 malicious packages detected in Q1 2026, putting your financial security at risk. Kaspersky's Q1 2026 report reveals a concerning shift in mobile threats, with 306,070 Android malware samples and 439 mobile ransomware Trojans also discovered.
TrickMo Trojan Adopts TON Blockchain for Evasive C2 Routing
A new variant of the TrickMo Trojan, tracked as TrickMo C, has emerged, cleverly using The Open Network (TON) blockchain to disguise its command-and-control traffic, making it even harder to detect. This sneaky malware targets banking and wallet users in France, Italy, and Austria through convincing TikTok-themed lures on Facebook ads.