InfoSecBulletin Cybersecurity for mankind
An Android malware campaign that targets banks has upgraded its capabilities and added more ways to avoid detection.
A new report from Zimperium found over 200 harmful apps related to a malicious operation. The report also mentions that the threat actor has been carrying out phishing attacks on financial institutions.
Check Point said BreachForum post old data
Apple Warns of 3 Zero Day Vulns Actively Exploited
24,000 unique IP attempted to access Palo Alto GlobalProtect portals
CVE-2025-1268
Patch urgently! Canon Fixes Critical Printer Driver Flaw
Within Minute, RamiGPT To Escalate Privilege Gaining Root Access
Australian fintech database exposed in 27000 records
Over 200 Million Info Leaked Online Allegedly Belonging to X
FBI investigating cyberattack at Oracle, Bloomberg News reports
OpenAI Offering $100K Bounties for Critical Vulns
Splunk Alert User RCE and Data Leak Vulns
ALSO READ:
The campaign was discovered in July 2023 by Sophos. They found 40 apps that were stealing information from customers of 4 Iranian banks.
The primary goal of the bogus apps is to trick victims into granting them extensive permissions as well as harvest banking login credentials and credit card details by abusing Android’s accessibility services.
“The corresponding legitimate versions of the malicious apps are available at Cafe Bazaar, an Iranian Android marketplace, and have millions of downloads,” Sophos researcher Pankaj Kohli said at the time.
“The malicious imitations, on the other hand, were available to download from a large number of relatively new domains, some of which the threat actors also employed as C2 servers.”
“Some of these domains were found to serve HTML phishing pages aimed at extracting credentials from mobile users.” To read the full report click here.
