Emerging Android threat ‘Albiriox’ enables full On‑Device Fraud

The article discusses a new Android malware named Albiriox, which operates as malware-as-a-service (MaaS) and targets over 400 financial applications, including banking and crypto wallets. First observed in September 2025, Albiriox allows real-time control of infected devices and employs advanced techniques for on-device fraud, including screen manipulation and credential theft.

It features a subscription model starting at $650 per month and has shown rapid evolution in its distribution methods, targeting users primarily in Austria. The malware utilizes VNC-based remote access, overlay attacks, and stealth techniques to evade detection, making it a significant threat in the mobile malware landscape.