
Mirax Android malware steals bank funds via accessibility services
Group-IB says thousands of retail banking phones in the Middle East, Türkiye and Africa were infected from March to September 2026.
9 stories, newest first · one card per story

Group-IB says thousands of retail banking phones in the Middle East, Türkiye and Africa were infected from March to September 2026.

Blocked attacks fell to 1,668,368, while 378,456 malicious packages included 119,688 mobile banking Trojans.
iVerify says victims only need to view an ad, including one served on Instagram.
F6 says three apps, including a police-and-fuel map, steal banking data; download counts and losses were not disclosed.

Hirudo Android trojan replaces Indonesian banking apps with patched copies to steal credentials and control devices.
Ukraine warns Russian-aligned hackers are infecting military and officials' iPhones and Android phones for espionage.
F6 uncovered 360+ fake government and news websites scamming Central Asians with bogus state payouts that harvest personal data and install mobile malware.

Zimperium details Mantax Otax, an Android malware combining ransomware, spyware, and harassment, spread via phishing APKs to Indonesian users.

The ToxicPanda Android banking trojan has matured with new features that expand its global reach beyond users' financial apps.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views