Hackers Drain Android Users’ Bank Accounts, Target 60 Banks and Financial Institutions Worldwide in Major Malware Attack: Report

Hackers are targeting dozens of banking and financial apps in a global push to empty Android users’ bank accounts, according to a new report.

A malware campaign dubbed Android/BankBot-YNRK is spreading via fake apps that impersonate Google News, according to cybersecurity researchers at CYFIRMA.

The malware infects devices by tricking users into downloading and installing fake apps from untrusted websites or links.

Once installed, the trojan gains remote control and steals financial data from over 60 targeted apps worldwide.

The malware abuses Android’s accessibility services to automate UI interactions, capture screen content and execute fraudulent transactions.

So far, the malware is targeting banks in Vietnam, Singapore, Malaysia, India and Indonesia, including apps like MoMo, DBS, SCB Mobile Banking, ICICI and HDFC.

Crypto wallets such as MetaMask, Exodus, and Trust Wallet are also at risk, with the trojan scraping balances, seed phrases and private keys.

The malware mutes notifications, logs device details, and persists through job scheduling to evade detection, while enabling call forwarding and clipboard monitoring to steal credentials.

CYFIRMA warns of severe impacts like unauthorized fund transfers and account takeovers.

Recommendations include downloading apps only from Google Play, monitoring permissions and blocking suspicious domains.

Follow us on X, Facebook and Telegram

Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Generated Image: Midjourney