
Mirax Android RAT steals bank logins through streaming-app ads
Group-IB says thousands of phones in the Middle East, Turkey and Africa were infected from March to September 2026, with losses in the millions.
10 stories, newest first · one card per story

Group-IB says thousands of phones in the Middle East, Turkey and Africa were infected from March to September 2026, with losses in the millions.

Google Play hosted a Hizbartech fake Chrome app, later removed, that showed 100,000-plus downloads.

A Hizbartech app impersonated Chrome on Google Play and showed a disputed 100,000-download badge before apparent removal.

Zscaler found a fake Android PDF reader with 10,000+ Google Play installs acting as dropper for the Anatsa banking trojan, with full IOCs published.

Bitdefender found preinstalled Midnight Mimosa malware on low-cost Android phones, enabling fraud, proxies, and remote control.
Researchers define a Google Play review sentiment index using signal fusion, shrinkage, and Kalman smoothing.
Researchers compare three label-noise detectors on 870,514 Google Play apps used to predict removals.

Bitdefender found thousands of Google Play Early Access apps with deceptive behavior, including ad-fraud-capable utilities requesting excessive permissions on Android devices.

Bitdefender found abuse of Google Play's review-free Early Access program to push thousands of deceptive casino and reward apps promoted with AI deepfake ads.

Bitdefender reports deceptive Google Play Early Access apps use deepfake celebrity ads and fake rewards to lure users into ad-fraud schemes.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views