Scam Radar
Banking trojans abuse Android Accessibility services to overlay fake login screens, intercept SMS OTPs and drain bank accounts. We track the active families (Anatsa, Hydra, BRATA, GodFather) and the side-loaded APKs distributing them.
Researchers have uncovered Rokarolla , an Android banking Trojan distributed through rogue websites posing as Google Play. Victims are lured into sideloading fake copies of popular apps such as...
Fake Banking App Updates Hide NFCShare Malware A new wave of NFCShare Android malware is being distributed through repositories on GitHub that impersonate updates for legitimate banking apps....
ESET researchers uncovered 28 fraudulent Android apps, dubbed CallPhantom, on Google Play that falsely promise to retrieve call history, SMS records, and WhatsApp logs for any phone number....
Same family of mercenary spyware (Intellexa Predator, FinFisher FinSpy, Hermit) targets Android via zero-click or 1-click exploits — often delivered via SMS link or maliciously crafted MMS. Multiple...
Photo-filter, wallpaper, horoscope, AI-chat apps offer a '3-day free trial' that auto-converts to $9.99/week or $99/week if not cancelled — often hidden under tiny grey text. Apple/Google have pulled...
Sideloaded 'WhatsApp Plus' / 'GBWhatsApp' / 'YoWhatsApp' / Telegram-mod apps promise extra features (multi-account, themes, no-blue-ticks). Distributed via Telegram channels, Reddit, third-party APK...
Free VPNs on Play / App Store have been documented routing traffic through unknown servers, exfiltrating DNS queries, browser cookies and sometimes injecting JavaScript. Many founded in jurisdictions...
FBI 2023+ alert: scammer (often via dating app / LinkedIn) befriends victim, invites them to 'beta-test a hot new fintech app' that's '90% ready' — a malware-laden iOS TestFlight build or Android...
User browses a malvertised site, gets a fullscreen popup styled like Android OS: 'Critical system update required — install now'. Tapping installs a malicious .apk. Once installed, it requests full...
Fake bank-helpdesk WhatsApp/SMS claims 'your account will be locked, install this app to verify' — links to a .apk outside Play Store (sideloaded). SpyNote then asks for Accessibility + Device Admin...
SharkBot is an Android banking trojan that does NOT rely on classic phishing overlays — instead it uses Accessibility Services to automate transfers IN your real banking app (ATS — Automatic Transfer...
Anatsa hides inside benign-looking Play Store apps (PDF viewers, cleaners, QR scanners, file managers) which pass review, then after install fetch a malicious payload that abuses Accessibility...
Open Mythos and paste it. Free triage in seconds. Court-grade forensic dossier from CHF 29/month when you need a defensible trail.