FlagThis

DroidBot, a novel Android RAT, targets 77 banks, cryptocurrency exchanges, and national organizations. It combines VNC and overlay attacks with keylogging and UI monitoring. Campaigns have been detected in Europe and potentially spreading to Latin America, highlighting the threat of advanced Android malware targeting financial institutions. DroidBot’s sophistication and wide reach make it a significant concern.

ImgSrc: oodaloop.com

References:

• Cyber Security News - DroidBot Malware Attacks 77 Banks & Crypto Trading Platforms - 21d
• The Hacker News - This $3,000 Android Trojan Targeting Banks and Cryptocurrency Exchanges - 21d
• OODAloop - Report on DroidBot Android trojan targeting banking and cryptocurrency applications. - 21d
• Over Security - Information on DroidBot from Cleafy. - 21d

Classification:

• HashTags: AndroidMalware RAT DroidBot
• Company: Various Banks & Crypto Exchanges
• Target: 77 banks and crypto exchanges
• Attacker: DroidBot
• Product: Android devices
• Feature: Remote Access
• Type: Malware
• Severity: Medium