Cybersecurity researchers have uncovered significant updates to the Android banking trojans ToxicPanda (aka TgToxic) and GoldDigger, both of which now feature enhanced…
ToxicPanda, also known as TgToxic, is an Android banking trojan active since July 2022. The updated version 2.0 features 167 remote commands,…
GoldDigger is an Android banking trojan attributed to the GoldFactory threat actor. It uses the dpt-shell packer for obfuscation and evasion, and…
Albiriox is an Android malware that targets more than 400 finance apps using on-device fraud techniques similar to RedWing.
Klopatra is an Android malware that uses hidden remote control and fake overlays to drain accounts while victims sleep, similar to RedWing.
A new Android malware operation called RedWing is being offered as a ready-made bank-fraud service on Telegram, allowing low-skill criminals to take…
RedWing is a new Android malware operation offered as a subscription-based service on Telegram, enabling criminals to steal banking credentials and intercept…
Oblivion is a $300-a-month rent-a-malware tool documented earlier in 2026, which RedWing is a variant of. It provides a ready-made platform for…
Fantasy Hub is a near-identical Russian-market rental kit for Android banking fraud, flagged by researchers last year. It uses similar techniques to…
A Brazilian banking trojan called Ousaban is targeting Windows users in Spain and Portugal, using phishing PDFs disguised as corrupted files. Discovered…