Banking Trojan

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight

Android malware, Banking Trojan, Malware, Malware & Threats, trojan /

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight 2026-08-22 at 11:30 By Eduard Kovacs The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware. The post Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight Read More »

Rokarolla Banking Trojan Targets 200 Applications

Android malware, Banking Trojan, Malware & Threats, Mobile & Wireless, Rokarolla /

Rokarolla Banking Trojan Targets 200 Applications 2026-06-18 at 13:42 By Eduard Kovacs The Android malware allows its operators to take control of infected devices and harvest sensitive information. The post Rokarolla Banking Trojan Targets 200 Applications appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Rokarolla Banking Trojan Targets 200 Applications Read More »

New Albiriox Android Malware Developed by Russian Cybercriminals

Albiriox, Android malware, Android trojan, Banking Trojan, Malware & Threats /

New Albiriox Android Malware Developed by Russian Cybercriminals 2025-12-01 at 16:31 By Eduard Kovacs Albiriox is a banking trojan offered under a malware-as-a-service model for $720 per month. The post New Albiriox Android Malware Developed by Russian Cybercriminals appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

New Albiriox Android Malware Developed by Russian Cybercriminals Read More »

New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages

Android trojan, Banking Trojan, Malware, Malware & Threats, mobile malware, Sturnus /

New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages 2025-11-20 at 17:56 By Eduard Kovacs The Android malware is in development and appears to be mainly aimed at users in Europe. The post New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages Read More »

Anatsa Android Banking Trojan Now Targeting 830 Financial Apps

Anatsa, Android malware, Android trojan, Banking Trojan, Malware, Malware & Threats /

Anatsa Android Banking Trojan Now Targeting 830 Financial Apps 2025-08-25 at 14:33 By Ionut Arghire The Anatsa Android banking trojan has expanded its target list to new countries and more cryptocurrency applications. The post Anatsa Android Banking Trojan Now Targeting 830 Financial Apps appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Anatsa Android Banking Trojan Now Targeting 830 Financial Apps Read More »

Coyote Banking Trojan First to Abuse Microsoft UIA

Banking Trojan, Coyote, Malware, Malware & Threats, Microsoft UIA, Stealer /

Coyote Banking Trojan First to Abuse Microsoft UIA 2025-07-23 at 16:20 By Eduard Kovacs Akamai’s analysis of the Coyote malware revealed that it abuses Microsoft’s UIA accessibility framework to obtain data. The post Coyote Banking Trojan First to Abuse Microsoft UIA appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Coyote Banking Trojan First to Abuse Microsoft UIA Read More »

Godfather Android Trojan Creates Sandbox on Infected Devices

Android malware, Android trojan, Banking Trojan, Godfather, Malware, Malware & Threats /

Godfather Android Trojan Creates Sandbox on Infected Devices 2025-06-20 at 14:50 By Ionut Arghire The Godfather Android trojan uses on-device virtualization to hijack legitimate applications and steal users’ funds. The post Godfather Android Trojan Creates Sandbox on Infected Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Godfather Android Trojan Creates Sandbox on Infected Devices Read More »

‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft

Android malware, Banking Trojan, Crocodilus, Malware, Malware & Threats /

‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft 2025-03-31 at 14:05 By Ionut Arghire The newly identified Android banking trojan Crocodilus takes over devices, enabling overlay attacks, remote control, and keylogging. The post ‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft Read More »

Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe

Banking Trojan, Grandoreiro, Malware, Malware & Threats, trojan /

Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe 2025-03-28 at 12:33 By Ionut Arghire The Grandoreiro banking trojan has reemerged in new campaigns targeting users in Latin America and Europe. The post Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Fresh Grandoreiro Banking Trojan Campaigns Target Latin America, Europe Read More »

Hidden in Plain Sight: ErrorFather’s Deadly Deployment of Cerberus

Banking Trojan, ErrorFather /

Hidden in Plain Sight: ErrorFather’s Deadly Deployment of Cerberus 2024-10-14 at 16:33 By daksh sharma Key Takeaways Overview The Cerberus Android Banking Trojan initially emerged in 2019 and was available for rent on underground forums. It gained notoriety for its ability to target financial and social media apps by exploiting the Accessibility service, using overlay

Hidden in Plain Sight: ErrorFather’s Deadly Deployment of Cerberus Read More »

Cyble Honeypot Sensors Detect WordPress Plugin Attack, New Banking Trojan

Banking Trojan, Honeypot, vulnerability, WordPress /

Cyble Honeypot Sensors Detect WordPress Plugin Attack, New Banking Trojan 2024-10-01 at 08:46 By dakshsharma16 Key Takeaways Overview Cyble’s Threat Hunting service this week discovered multiple instances of exploit attempts, malware intrusions, financial fraud, and brute-force attacks via its network of Honeypot sensors. In the week of Sept. 18-24, Cyble researchers identified five recent active exploits, including new

Cyble Honeypot Sensors Detect WordPress Plugin Attack, New Banking Trojan Read More »

New Antidot Android Banking Trojan Masquerading as Fake Google Play Updates 

Banking Trojan /

New Antidot Android Banking Trojan Masquerading as Fake Google Play Updates  2024-05-16 at 19:46 By neetha871ad236bd Key Takeaways  Overview  In April, Cyble Research and Intelligence Labs (CRIL) released a detailed analysis of a newly surfaced Android Banking Trojan named Brokewell, created by malware developer Baron Samedit and capable of taking over devices.   Recently, we’ve discovered

New Antidot Android Banking Trojan Masquerading as Fake Google Play Updates  Read More »

Brokewell: A New Android Banking Trojan Targeting Users In Germany

Banking Trojan, trojan /

Brokewell: A New Android Banking Trojan Targeting Users In Germany 2024-04-25 at 19:32 By neetha871ad236bd Key Takeaways Overview Mobile banking has become increasingly prevalent in recent years, offering users convenient access to financial services at their fingertips. However, with this convenience comes the risk of cyber threats targeting mobile devices, such as Android Banking Trojans.

Brokewell: A New Android Banking Trojan Targeting Users In Germany Read More »

The Fate of the CriminalMW Group: Endgame or a New Rebranding Journey? 

Android, Banking Trojan, trojan /

The Fate of the CriminalMW Group: Endgame or a New Rebranding Journey?  2024-02-19 at 12:46 By neetha871ad236bd CRIL analyzes the Brazilian CriminalMW Group’s activities and their rebranding tactics. The post The Fate of the CriminalMW Group: Endgame or a New Rebranding Journey?  appeared first on Cyble. This article is an excerpt from Cyble View Original

The Fate of the CriminalMW Group: Endgame or a New Rebranding Journey?  Read More »

Greenbean: Latest Android Banking Trojan Leveraging Simple RealTime Server (SRS) for C&C Communication

Android, Banking Trojan, Malware, trojan /

Greenbean: Latest Android Banking Trojan Leveraging Simple RealTime Server (SRS) for C&C Communication 2024-02-01 at 08:17 By neetha871ad236bd Cyble analyzes GreenBean, a new Android Banking Trojan leveraging Simple RealTime Server (SRS) for C&C Communication The post Greenbean: Latest Android Banking Trojan Leveraging Simple RealTime Server (SRS) for C&C Communication appeared first on Cyble. The post

Greenbean: Latest Android Banking Trojan Leveraging Simple RealTime Server (SRS) for C&C Communication Read More »

TrickMo’s Return: Banking Trojan Resurgence With New Features

Banking Trojan /

TrickMo’s Return: Banking Trojan Resurgence With New Features 04/12/2023 at 18:50 By cybleinc CRIL analyzes a new variant of TrickMo Banking Trojan targeting Android users, employing Overlay attacks to steal credentials from targeted applications. The post TrickMo’s Return: Banking Trojan Resurgence With New Features appeared first on Cyble. This article is an excerpt from Cyble

TrickMo’s Return: Banking Trojan Resurgence With New Features Read More »

New Remo Android Banking Trojan Targets Over 50 Banking Applications And Crypto Wallets

Android Banking trojan, Banking Trojan, Binance, Cryptocurrency, Malware, phishing, Thailand, Threat Actors, Vietnam /

New Remo Android Banking Trojan Targets Over 50 Banking Applications And Crypto Wallets 14/09/2023 at 20:17 By dakshsharma16 CRIL analyzes a newly discovered Remo Android Banking Trojan targeting over 50 banking and cryptocurrency wallet applications from Indonesia, Vietnam, and Thailand. The post New Remo Android Banking Trojan Targets Over 50 Banking Applications And Crypto Wallets

New Remo Android Banking Trojan Targets Over 50 Banking Applications And Crypto Wallets Read More »

Cloud Mining Scam Distributes Roamer Banking Trojan

AB Ditizen, ACB One, and NFTS, Android, App store, Banking applications, Banking Trojan, Binance, Cloud Mining, CloudMining.apk, crypto mining, Cryptocurrency, cybercrime, darkweb, data breach, Data leak, ETH, Ethereum, fake app, Google Play, HDFC Bank Mobile Banking App, infostealer, Malware, MB Bank, Monero, MSB mBank, phishing, PV Mobile Banking, Roamer, SCB Mobile Banking, Telegram, Threat Intelligence, VCB Digibank, VietinBank iPay, XMR /

Cloud Mining Scam Distributes Roamer Banking Trojan 14/06/2023 at 16:35 By cybleinc Cyble analyzes a cloud mining scam leveraging phishing to distribute the Roamer banking trojan, targeting Android Crypto wallets and banking applications, aiming to steal sensitive information. The post Cloud Mining Scam Distributes Roamer Banking Trojan appeared first on Cyble. This article is an

Cloud Mining Scam Distributes Roamer Banking Trojan Read More »

HelloTeacher: New Android Malware Targeting Banking Users In Vietnam

All, Android malware, Banking Trojan, HelloTeacher Malware, Kik Messenger, Malware, MB Bank, spyware, Threat Actor, Threat Intelligence, TPBank Mobile, Viber, VietinBank iPay, Vietnam /

HelloTeacher: New Android Malware Targeting Banking Users In Vietnam 05/06/2023 at 17:23 By cybleinc Cyble analyzes a new malware “HelloTeacher” masquerading as popular messaging app to target banking users from Vietnam and steals sensitive data. The post HelloTeacher: New Android Malware Targeting Banking Users In Vietnam appeared first on Cyble. This article is an excerpt

HelloTeacher: New Android Malware Targeting Banking Users In Vietnam Read More »

PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector

Android, Android Banking trojan, ATS, ATS Framework, Banco Central do Brasil, Banco Itaú, Bank fraud, Banking Sector, Banking Trojan, BFSI, Brazil, C6 Bank, cybercrime, darkweb, Data leak, fake app, fraud, GoatRAT, Malware, Mercado Pago, NUBank, Nubank: conta, PagBank Banco, PasteBin, PicPay, PIX, PixBankBot, PixPirate, R$, Threat Actors, Threat Intelligence /

PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector 30/05/2023 at 12:36 By cybleinc Cyble analyzes PixBankBot, a new ATS-based malware that targets Brazilian banks through the popular Pix instant payment platform. The post PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector appeared first on Cyble. This article is an

PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector Read More »

Scroll to Top