Group-IB exposes CyberDakait Android malware. The Indian CyberDakait Android malware campaign uses 7 trojans to infect 17,960 phones and steal 7.6M SMS.

Related Posts:

• Malicious Claude Code Extension Injects SSH Backdoor in Cursor Marketplace
• INJ3CTOR3 FreePBX Malware Steals 17 Configuration Files for Off-Box Toll Fraud
• Qilin Ransomware Targets VMware ESXi Servers and Healthcare Networks After Claiming 900 Victims in 2026

The post CyberDakait Deploys Seven Android Trojan Families Against 17,960 Indian Banking Devices appeared first on Daily CyberSecurity.

ThreatFabric uncovers the Hirudo banking trojan. The Android Hirudo banking trojan replaces real banking apps with patched copies to steal funds.

Related Posts:

• GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps
• Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer
• CodeAudit AI VS Code Extension Captures Developer Source Code in the Background

The post Hirudo Android Banking Trojan Replaces Genuine Banking Apps With Patched Copies appeared first on Daily CyberSecurity.

Group-IB found the RemControl Android banking trojan, a new malware using AI phishing overlays and fake TVTap apps to steal banking PINs and credentials.

Related Posts:

• PamStealer macOS Malware Spreads via Fake Wavel Crypto App
• Malicious Terraform Providers Spread Graphalgo Go Malware
• CLOSEDQUORUM AI Malware Uses LLMs for Autonomous C2

The post RemControl Android Banking Trojan Steals Bank PINs appeared first on Daily CyberSecurity.

Learn how Brazilian KREMLIN banking malware steals credentials using fake browser extensions. Elastic Security Labs details the KREMLIN banking malware.

Related Posts:

• LLM-Generated PhantomRaven Information Stealer Discovered
• Mantax Otax Android Malware: Spyware Meets Ransomware
• SloppyRAT Malware Analyzed in Ransomware Attacks

The post KREMLIN Banking Malware Targets Brazilian Banks appeared first on Daily CyberSecurity.