InfoSecBulletin Cybersecurity for mankind
The “Antidot” Android Banking Trojan pretends to be a Google Play update app and targets Android users in different regions. It uses VNC and overlay techniques to steal credentials.
Cyble Research and Intelligence Labs (CRIL) found that the new Android Banking Trojan, called “Antidot,” pretends to be a Google Play update app and can target many different people. It has harmful features like overlay attacks and keylogging to get sensitive information. Antidot communicates with a server to get commands and can do things like collect SMS messages, make USSD requests, and control device features like the camera. It can also use VNC to control infected devices.
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
Cyble Research and Intelligence Labs (CRIL) published an analysis of an Android Banking Trojan called Brokewell. It was created by malware developer Baron Samedit and can take control of devices previously.
Now, CRIL found a new Android Banking Trojan called “Antidot,” first seen on May 6, 2024. This Trojan uses overlay attacks to steal credentials. Click here to read out the full report.
