Tag: ermac

3 Attack Reports | 0 Vulnerabilities

Attack reports

DTO malware that takes notes

Perseus is a new Android threat that builds upon earlier malware families like Cerberus and Phoenix. It enables real-time monitoring and interaction with infected devices through Accessibility-based remote sessions, allowing full Device Takeover. The malware focuses on extracting high-value persona…
android
anti-analysis
medusa
ermac
cerberus
overlay attacks
remote control
iptv
accessibility service
phoenix
2026-03-19
dto
klopatra
notes monitoring
perseus
Published: March 19, 2026
Downloadable IOCs: 3

ERMAC V3.0 Banking Trojan: Full Source Code Leak and Infrastructure Analysis

The complete source code for ERMAC V3.0, an advanced banking trojan, was discovered and analyzed, providing rare insight into this active Malware-as-a-Service platform. ERMAC has evolved to target over 700 financial and cryptocurrency apps, employing sophisticated form injection techniques and encr…
malware-as-a-service
banking trojan
infrastructure analysis
hook
ermac
android malware
cerberus
2025-08-15
exfiltration server
c2 backend
source code leak
encrypted communications
form injection
Published: August 15, 2025
Downloadable IOCs: 0

The trojan horse that wanted to fly

Rocinante is a new strain of mobile malware originating from Brazil, capable of keylogging, stealing PII through phishing, and performing device takeover. It targets Brazilian banking institutions using a combination of Firebase messaging, HTTP traffic, WebSocket, and Telegram API for communication…
phishing
remote access
banking trojan
brazil
keylogging
mobile malware
2024-09-02
device takeover
hook
rocinante
ermac
Published: September 2, 2024
Downloadable IOCs: 4
Click here to see more Attack Reports