Tag: trickmo

2 Attack Reports | 0 Vulnerabilities

Attack reports

New TrickMo Variant: Device Take Over malware targeting Banking, Fintech, Wallet & Auth apps

A new variant of the TrickMo Android banking trojan was identified between January and February 2026, representing a substantial platform redesign rather than new capabilities. The malware has migrated its command-and-control infrastructure entirely onto The Open Network (TON) using .adnl endpoints…
android
banking trojan
device takeover
trickmo
accessibility abuse
socks5 proxy
2026-05-11
godfather
network pivot
ssh tunnelling
ton network
Published: May 11, 2026
Downloadable IOCs: 6

Expanding the Investigation: Deep Dive into Latest TrickMo Samples

This report delves into the analysis of 40 recent variants of the banking trojan TrickMo, uncovering novel capabilities like stealing unlock patterns/PINs and geolocating victims. It examines the malware's advanced features, including credential theft, data exfiltration, and command-and-control mec…
android
banking trojan
2024-10-15
otp interception
overlay attacks
trickmo
Published: October 15, 2024
Downloadable IOCs: 94
Click here to see more Attack Reports