Discover how the Mirax Android malware campaign uses streaming app lures, server-side C2, and Accessibility Service abuse for device takeover targeting financial institutions in the META region.
From Streaming to Stealing: Mirax and the Rise of Server-side Android Device Takeover in META
About this summary. This is a short excerpt from the description that Group-IB published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.group-ib.com/blog/mirax-android-device-takeover-rat/
Source attribution: headline and facts are from Group-IB (group-ib.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.
Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks.
Low-cost Android phones are arriving with malware that owners can’t uninstall
People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The…
Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.
NCSC-2026-0467 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung Mobile relevante kwetsbaarheden verholpen in hun producten. De ernstige kwetsbaarheden…
Scammers capitalize on GTA 6 hype to push malware and crypto cons
Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned…