ThreatFabric

Hirudo Android Banking Trojan Replaces Genuine Banking Apps With Patched Copies

• Malware

Hirudo Android Banking Trojan Replaces Genuine Banking Apps With Patched Copies

Do Son October 16, 2026 0

ThreatFabric uncovers the Hirudo banking trojan. The Android Hirudo banking trojan replaces real banking apps with patched copies to steal funds.

Manic Android Malware Steals Data Without Active Internet

• Malware

Manic Android Malware Steals Data Without Active Internet

Do Son August 23, 2026 0

A new Manic Android malware campaign combines banking fraud and spyware, using a unique offline mesh relay to steal data even without internet access.

TrickMo’s Stealthy Upgrade: Android Banking Malware is Pivoting to The Open Network

• Malware

TrickMo’s Stealthy Upgrade: Android Banking Malware is Pivoting to The Open Network

Do Son May 12, 2026 0

ThreatFabric uncovers TrickMo Variant C, a new Android banking trojan using the decentralized TON network to evade detection and turn phones into proxies.

Rebirth of a Monster: New ‘Perseus’ Android Malware Hunts for Your Private Notes

• Malware

Rebirth of a Monster: New ‘Perseus’ Android Malware Hunts for Your Private Notes

Do Son March 23, 2026 0

ThreatFabric uncovers "Perseus," an evolved Android malware targeting note-taking apps to steal recovery phrases and private data via accessibility services.

Streaming Fraud: “Massiv” Android Trojan Uses Fake IPTV Apps for Complete Device Takeover

• Malware

Streaming Fraud: “Massiv” Android Trojan Uses Fake IPTV Apps for Complete Device Takeover

Do Son February 23, 2026 0

ThreatFabric exposes Massiv, a new Android banking Trojan hiding in fake IPTV apps. The malware uses accessibility permissions for full device takeover.

Sturnus Trojan Bypasses WhatsApp/Signal Encryption & Takes Over Android Devices

• Malware

Sturnus Trojan Bypasses WhatsApp/Signal Encryption & Takes Over Android Devices

Do Son November 21, 2025 0

The new Sturnus Android banking trojan bypasses end-to-end encryption on WhatsApp & Signal and enables full device takeover for hidden financial fraud.

Datzbro Trojan: Spyware-Banking Malware Hijacks Seniors’ Devices with Fake Facebook Lures

• Malware

Datzbro Trojan: Spyware-Banking Malware Hijacks Seniors’ Devices with Fake Facebook Lures

Do Son October 1, 2025 0

The Datzbro Android Trojan is targeting seniors via fake Facebook groups and AI content. The hybrid malware can remotely control devices and steal banking credentials.

RatOn: The New Android Trojan That Steals Crypto and Uses NFC Relay Attacks

• Malware

RatOn: The New Android Trojan That Steals Crypto and Uses NFC Relay Attacks

Do Son September 9, 2025 0

A new Android banking trojan, RatOn, merges overlay fraud with NFC relay attacks, automated money transfers, and crypto wallet theft, posing a new threat to users.

PhantomCard: The New Android Trojan That Steals Your Contactless Payments

• Malware

PhantomCard: The New Android Trojan That Steals Your Contactless Payments

Do Son August 15, 2025 0

ThreatFabric researchers have uncovered PhantomCard, an Android Trojan that uses an NFC relay attack to steal contactless card data and enable fraudulent payments.

Anatsa Resurfaces: Banking Trojan Targets North America via Google Play

• Malware

Anatsa Resurfaces: Banking Trojan Targets North America via Google Play

Do Son July 9, 2025 0

Anatsa, an advanced Android banking trojan, is targeting North America via Google Play. It steals credentials and conducts remote fraud through disguised apps and overlay attacks.

Crocodilus Trojan Evolves: Android Malware Goes Global with New Seed Phrase Stealer and Contact Injection

• Malware

Crocodilus Trojan Evolves: Android Malware Goes Global with New Seed Phrase Stealer and Contact Injection

Do Son June 4, 2025 0

Crocodilus, a rapidly evolving Android banking trojan, now targets global users, stealing crypto seed phrases and bypassing defenses.