
New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs
RemControl, a new Android banking trojan, uses fake streaming-app downloads and overlays to steal banking PINs.
7 stories, newest first · one card per story

RemControl, a new Android banking trojan, uses fake streaming-app downloads and overlays to steal banking PINs.

Zimperium analyzed RatHat, an Android banking trojan that uses a live AI assistant and ADB abuse to steal bank logins, PINs, and MFA codes.

Zimperium discovered RatHat, an AI-assisted Android banking trojan linked to Chinese actors, stealing credentials via overlays and intercepting SMS one-time passwords.

Zimperium identified RatHat, an Android banking trojan capturing PINs via overlays and abusing Wireless Debugging to reinstall itself after removal.

Group-IB found the Gigabud Android banking trojan clones banking apps into a hidden work profile to conduct fraud undetected.

Zimperium and IBM Trusteer report expanded ToxicPanda 2.0 and GoldDigger Android banking trojan campaigns now targeting 349 financial institutions across 16 countries.

Zimperium documents ToxicPanda 2.0, an Android banking trojan now targeting 349 financial institutions in 16 countries via ADB privilege escalation and overlay credential theft.
Today 1.6K readers · 2.4K views · 774 reads · all time 189K views