Group-IB exposes CyberDakait Android malware. The Indian CyberDakait Android malware campaign uses 7 trojans to infect 17,960 phones and steal 7.6M SMS.

Related Posts:

• Malicious Claude Code Extension Injects SSH Backdoor in Cursor Marketplace
• INJ3CTOR3 FreePBX Malware Steals 17 Configuration Files for Off-Box Toll Fraud
• Qilin Ransomware Targets VMware ESXi Servers and Healthcare Networks After Claiming 900 Victims in 2026

The post CyberDakait Deploys Seven Android Trojan Families Against 17,960 Indian Banking Devices appeared first on Daily CyberSecurity.

Researcher Ovi exposes uCreator Android spyware. The YingGai uCreator Android spyware platform uses VirtualApp and LSPatch to hijack 20 mobile apps.

Related Posts:

• Amazon ClickFix Campaign Abuses Windows Finger Command to Drop Lumma Stealer and NetSupport
• Skynet LLMjacking Agent Hijacks Exposed AI Models to Hack Servers and Mine Crypto
• INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors

The post uCreator Android Spyware Hooks Telegram and WeChat Inside Virtual Containers appeared first on Daily CyberSecurity.

Cyble reveals the GhostX ecosystem where Android GhostBat RAT and the new GhostBat RAT variant use Ghost Overlay to steal PINs from 60 Indian apps.

Related Posts:

• Hirudo Android Banking Trojan Replaces Genuine Banking Apps With Patched Copies
• Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer
• CodeAudit AI VS Code Extension Captures Developer Source Code in the Background

The post GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps appeared first on Daily CyberSecurity.

ThreatFabric uncovers the Hirudo banking trojan. The Android Hirudo banking trojan replaces real banking apps with patched copies to steal funds.

Related Posts:

• GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps
• Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer
• CodeAudit AI VS Code Extension Captures Developer Source Code in the Background

The post Hirudo Android Banking Trojan Replaces Genuine Banking Apps With Patched Copies appeared first on Daily CyberSecurity.

Group-IB found the RemControl Android banking trojan, a new malware using AI phishing overlays and fake TVTap apps to steal banking PINs and credentials.

Related Posts:

• PamStealer macOS Malware Spreads via Fake Wavel Crypto App
• Malicious Terraform Providers Spread Graphalgo Go Malware
• CLOSEDQUORUM AI Malware Uses LLMs for Autonomous C2

The post RemControl Android Banking Trojan Steals Bank PINs appeared first on Daily CyberSecurity.

Zimperium zLabs discovered Mantax Otax Android malware, a fierce Indonesian mobile ransomware integrating spyware to hijack, record, and extort victims.

Related Posts:

• SloppyRAT Malware Analyzed in Ransomware Attacks
• Vwork Android Malware Clones Apps in Gigabud Attacks
• Casbaneiro Banking Trojan Hits Latin American Banks

The post Mantax Otax Android Malware: Spyware Meets Ransomware appeared first on Daily CyberSecurity.