InfoSecBulletin Cybersecurity for mankind
The “Antidot” Android Banking Trojan pretends to be a Google Play update app and targets Android users in different regions. It uses VNC and overlay techniques to steal credentials.
Cyble Research and Intelligence Labs (CRIL) found that the new Android Banking Trojan, called “Antidot,” pretends to be a Google Play update app and can target many different people. It has harmful features like overlay attacks and keylogging to get sensitive information. Antidot communicates with a server to get commands and can do things like collect SMS messages, make USSD requests, and control device features like the camera. It can also use VNC to control infected devices.
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
Microsoft Patch Tuesday September 2026 Fixed 973 Flaws Fixed, 2 Zero-Days
A single call: ShinyHunters Gained Access to 6 Million Customers’ Records
The first zero-click worm to spread through WeChat calls across iOS and Android
USA Bimbo Bakeries Confirms Data Stolen in Oracle EBS Zero-Day Attack
ALERT
Roundcube Webmail fixes 12 security flaws, including zero-click XSS and SSRF bypass
New HOOKEDGE Backdoor Deployed by Hackers in European Espionage
Hackers Exploiting MikroTik RouterOS Flaw Gaining Network Access
Cyble Research and Intelligence Labs (CRIL) published an analysis of an Android Banking Trojan called Brokewell. It was created by malware developer Baron Samedit and can take control of devices previously.
Now, CRIL found a new Android Banking Trojan called “Antidot,” first seen on May 6, 2024. This Trojan uses overlay attacks to steal credentials. Click here to read out the full report.
