Group-IB uncovers RemControl, a new Android banking trojan targeting European, Middle Eastern and Canadian banks, whose criminal infrastructure was unknowingly built by AI.

running real-time scans against known malware read more about New RemControl Android banking malware targets users in Europe and Canada

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application.

Malware RemControl puede controlar celulares Android, mostrar falsas pantallas bancarias y robar credenciales. Así funciona y cómo evitarlo.

Un nuevo malware para Android se disfraza de aplicaciones de TV. Roba credenciales bancarias mediante interfaces engañosas.

A newly uncovered Android banking trojan dubbed RemControl is targeting customers of more than 30 financial institutions across Europe, the Middle East, and Canada.

A new Android malware named RemControl is targeting banking customers across Europe, the Middle East, and Canada by abusing Accessibility Services and AI-generated code.

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. [...]

✓ AI Security Awareness Training lessons from RemControl, an Android banking malware campaign targeting Europe and Canada through fake apps and phishing overlays.

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application.

Onderzoekers van Group-IB hebben een nieuwe Android-bankentroyan geïdentificeerd, genaamd RemControl. De eerste sporen van deze malafide software werden in juli 2026 ontdekt. RemControl maakt gebruik van misleidende downloadpagina's die de uitstraling hebben van de Google Play Store, maar de aangeboden streaming-app is daar niet verkrijgbaar. Deze valse pagina's worden gehost op servers die door de aanvallers worden beheerd. Een specifieke campagne richtte zich uitsluitend op gebruikers met Italiaanse IP-adressen, waarbij de malafide installer alleen werd aangeboden aan deze groep. Na installatie presenteert de troyan eerst een nagemaakte update-scherm voor de streaming-app. Vervolgens vraa...

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application.

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application.

RemControl, a new Android banking trojan, spreads through a fake TVTap app, blocks Play Protect and steals PINs from bank customers.

Notamment en Europe, les clients d'une trentaine d'institutions financières sont des victimes potentielles du malware pour Android baptisé RemControl. Il porte les traces d'un développement assisté par IA.

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application.

RemControl, a new Android banking trojan, spreads through a fake TVTap app, blocks Play Protect and steals PINs from bank customers.

RemControl is a new Android banking trojan that lures victims with fake TVTap app pages, then abuses permissions to take over devices and steal banking PINs and other sensitive data. Group-IB found that it targets customers of more than 30 banks across several countries and appears to use AI-assisted infrastructure and malware-as-a-service delivery. #RemControl #GroupIB #TVTap #UNKK #UNKN #Medusa

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application.