Scam Facebook groups send malicious Android malware to seniors

Malwarebytes reports that scam Facebook groups aimed at “active seniors” are distributing Android malware by inviting users to download an app after joining groups that promote travel and community activities. According to ThreatFabric, several groups were created with AI-generated content to appear authentic, and victims were sometimes asked to pay a sign‑up fee on the site hosting the download.

The malicious apps went by names such as Senior Group, Lively Years, ActiveSenior, and DanceWave, with one download server hosted at download.seniorgroupapps[.]com. The campaign commonly delivered the Datzbro Trojan, though some targets were hit by Zombinder, a Trojan dropper capable of bypassing Google’s Android 13+ restrictions.

Once installed, Datzbro can record audio and video, display phishing overlays, steal passwords, and allow remote control of infected devices; researchers suspect the malware was initially developed in China before broader reuse. The campaign has reached victims worldwide, including the UK, and Malwarebytes notes that several groups have since been taken down, with continued caution advised for users in Facebook groups offering suspicious activities.