Security researchers have uncovered two distinct Android malware strains, BankBot-YNRK and DeliveryRAT, both engineered to pilfer sensitive financial data from compromised devices. The discoveries highlight ongoing sophistication in mobile threat actor tactics, techniques, and procedures.

BankBot-YNRK e DeliveryRAT sono due trojan Android sofisticati scoperti recentemente AmmassiIT News - AmmassiIT AmmassiIT

Cybersecurity researchers have shed light on two different Android trojans called BankBot-YNRK and DeliveryRAT that are capable of harvesting sensitive data from compromised devices. According to CYFIRMA, which analyzed three different samples of BankBot-YNRK, the malware incorporates features to sidestep analysis efforts by first checking its running within a virtualized or emulated environment

Cybersecurity researchers have identified BankBot-YNRK and DeliveryRAT, two sophisticated Android trojans actively exfiltrating sensitive financial data and cryptocurrency assets. These threats employ advanced evasion techniques and malware-as-a-service models, with a related trend of NFC misuse for payment data theft.

Cybersecurity researchers have shed light on two different Android trojans called BankBot-YNRK and DeliveryRAT that are capable of harvesting sensitive data from compromised devices. According to CYFIRMA, which analyzed three different samples of BankBot-YNRK, the malware incorporates features to sidestep analysis efforts by first checking its running within a virtualized or emulated environment

Two stealthy mobile trojans are draining money and trust—here’s what executives must act on now

Two stealthy mobile trojans are draining money and trust—here’s what executives must act on now

Read more

Read more

Researchers expose BankBot-YNRK and DeliveryRAT—Android trojans hijacking phones, stealing data, and evading detection.

Cybersecurity experts from F6 have analyzed an updated version of DeliveryRAT, a trojan that disguises itself as popular applications such as food delivery services, marketplaces, banking apps, and package tracking tools. This new variant introduces significant enhancements, including the ability to execute Distributed Denial of Service (DDoS) attacks and perform various visual activities to steal additional information. DeliveryRAT is a Remote Access Trojan (RAT) that has been designed to infiltrate systems by masquerading as legitimate applications. The updated version represents a notable evolution in its capabilities, posing a greater threat to both individual users and organizations. The addition of DDoS capabilities is particularly concerning. DDoS attacks can disrupt services by overwhelming target servers with excessive traffic, leading to downtime and potential financial losses. This new functionality suggests that the operators behind DeliveryRAT are expanding their attack vectors to include not just data theft but also service disruption. Furthermore, the inclusion of visual activities indicates that the malware can now capture more sensitive information through methods such as keylogging and screen capturing. This enhancement allows attackers to gather a wider range of data, including login credentials, financial information, and other sensitive details. The impact of this updated variant on the cybersecurity landscape is significant. The broader attack surface, facilitated by the malware's disguise as popular apps, increases the likelihood of successful infections. Additionally, the enhanced data theft capabilities and DDoS functionality elevate the threat level, making it crucial for cybersecurity professionals to update their detection and prevention strategies. To mitigate the risks posed by this updated variant of DeliveryRAT, organizations should implement robust DDoS protection measures and monitor for unusual traffic patterns. Users should be educated about the risks of downloading apps from untrusted sources and encouraged to verify the authenticity of applications before installation. In conclusion, the updated version of DeliveryRAT represents a significant evolution in malware capabilities. Cybersecurity professionals must remain vigilant and proactive in their defense strategies to counter this growing threat.

The landscape of mobile security is constantly evolving, with sophisticated mobile malware posing significant risks to user data and privacy. Recent analyses by

Cybersecurity researchers have shed light on two different Android trojans called BankBot-YNRK and DeliveryRAT that are capable of harvesting sensitive data from compromised devices. According to CYFIRMA, which analyzed three different samples of BankBot-YNRK, the malware incorporates features to sidestep analysis efforts by first checking its running within a virtualized or emulated environment

Researchers expose BankBot-YNRK and DeliveryRAT—Android trojans hijacking phones, stealing data, and evading detection.

Security researchers have uncovered two distinct Android malware strains, BankBot-YNRK and DeliveryRAT, both engineered to pilfer sensitive financial data from compromised devices. The discoveries highlight ongoing sophistication in mobile threat actor tactics, techniques, and procedures. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate lin...