Researchers expose BankBot-YNRK and DeliveryRAT—Android trojans hijacking phones, stealing data, and evading detection.

Origin

東南アジアで急速に拡大するAndroid/BankBot-YNRK。Androidのアクセシビリティ機能を悪用し、銀行アプリや暗号資産ウォレットから金銭を自動的に盗み出す高機能型トロイの木馬。音声アラートを完全に無音化し、リアルタイムスクリーンショット機能でシード文や秘密鍵を抽出。

Negli ultimi giorni la scena della sicurezza mobile ha visto un nuovo attacco Android che sfrutta due trojan sofisticati: BankBot-YNRK e DeliveryRAT. Questi malware si mascherano da app apparentemente legittime come VPN, utility, servizi locali o finti aggiornamenti. Una volta installati mirano a rubare credenziali, intercettare codici e prendere il controllo remoto del dispositivo. Come funziona l’attacco Android…

BankBot-YNRK e DeliveryRAT sono due trojan Android sofisticati scoperti recentemente AmmassiIT News - AmmassiIT AmmassiIT

approved or supported models read more about Researchers Uncover BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial Data

Researchers expose BankBot-YNRK and DeliveryRAT—Android trojans hijacking phones, stealing data, and evading detection.

Cybersecurity researchers have shed light on two different Android trojans called BankBot-YNRK and DeliveryRAT that are capable of harvesting sensitive data from compromised devices. According to CYFIRMA, which analyzed three different samples of BankBot-YNRK, the malware incorporates features to sidestep analysis efforts by first checking its running within a virtualized or emulated environment

Security researchers have uncovered two distinct Android malware strains, BankBot-YNRK and DeliveryRAT, both engineered to pilfer sensitive financial data from compromised devices. The discoveries highlight ongoing sophistication in mobile threat actor tactics, techniques, and procedures.

Security researchers have uncovered two distinct Android malware strains, BankBot-YNRK and DeliveryRAT, both engineered to pilfer sensitive financial data from compromised devices. The discoveries highlight ongoing sophistication in mobile threat actor tactics, techniques, and procedures. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate lin...

The Android/BankBot-YNRK malware is currently targeting users in Indonesia by posing as legitimate applications. This variant of the BankBot malware family is designed to disable alerts and drain cryptocurrency wallets, highlighting a shift in focus from traditional banking credentials to digital currencies. The malware's ability to mute notifications is a critical tactic that allows it to operate stealthily, preventing users from detecting unauthorized transactions. This behavior is particularly concerning given the irreversible nature of cryptocurrency transactions, which makes recovery of stolen funds nearly impossible. From a technical standpoint, the malware likely employs social engineering techniques to trick users into installing malicious apps. Once installed, it may exploit Android's accessibility services or other privileges to suppress alerts and carry out its malicious activities. The impact of such malware extends beyond individual financial loss. It underscores the need for enhanced security measures in mobile financial applications, including robust authentication and real-time monitoring of transactions. For cybersecurity professionals, this incident emphasizes the importance of mobile threat defense solutions and user education to prevent the installation of malicious apps. In summary, the Android/BankBot-YNRK variant represents a growing trend of malware targeting cryptocurrency users. As digital currencies gain popularity, cybercriminals are increasingly focusing on these high-value targets. Effective defense strategies must include proactive threat detection, user awareness, and stringent app vetting processes to mitigate these risks.

🎯 Introduction: A new wave of Android malware is sweeping through Indonesia, camouflaged as a trusted government app and leaving digital chaos in its wake. Known as Android/BankBot-YNRK, this Trojan is far from ordinary—it’s stealthy, sophisticated, and devastatingly effective. By exploiting Android’s accessibility features, it gains total control over users’ devices, drains crypto wallets, and silences alerts so victims never suspect a thing.

Researchers expose BankBot-YNRK and DeliveryRAT—Android trojans hijacking phones, stealing data, and evading detection.

Eyal Estrin unread, 4:50 AM (1 hour ago)    to https://www.cyfirma.com/research/investigation-report-android-bankbot-ynrk-mobile-banking-trojan/ Eyal Estrin CISSP, CCSP, CISM, CISA, CDPSE, CCSK Blog: https://security-24-7.com | Books: https://amzn.to/42Xai9A | https://amzn.to/3Sggbtv Twitter: @eyalestrin | Bluesky: @eyalestrin.bsky.social

Cybersecurity researchers have identified BankBot-YNRK and DeliveryRAT, two sophisticated Android trojans actively exfiltrating sensitive financial data and cryptocurrency assets. These threats employ advanced evasion techniques and malware-as-a-service models, with a related trend of NFC misuse for payment data theft.

Cybersecurity researchers have shed light on two different Android trojans called BankBot-YNRK and DeliveryRAT that are capable of harvesting sensitive data from compromised devices. According to CYFIRMA, which analyzed three different samples of BankBot-YNRK, the malware incorporates features to sidestep analysis efforts by first checking its running within a virtualized or emulated environment