Craxs Rat, the master tool behind fake app scams and banking fraud
Excerpt
fraud | Group-IB Blog
Introduction
Since April 2023, a series of scams involving fake Android apps have targeted Singapore. These fake apps are banking trojans used to harvest victims’ banking credentials and personal information, as well as to take control of their devices. In this specific case, threat actors have been observed using phishing websites as part of their campaign to deliver fake apps posing as known brands. Abusing popular brands and imitating Android trojans as legitimate-looking apps has been a notable trend in cybercriminal activity in recent years.
The Android fake apps were introduced as part of the scam scheme to lure victims with fraudulent advertisements of servi…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Group-IB on group-ib.com.
Mentioned in the excerpt
More from Group-IB28
- Stray Cat, Open Doors: How k0t Wanders Through the Network EdgeGroup-IB · Published 21 Oct
- BlogGroup-IB · Published 15 Dec 2022
- Anatomy of BraZetsu: How Cybercriminals Fuel the Underground EcosystemGroup-IB · Published 31 Aug
- JadeProx: Tracing a China-nexus Operation Through an OPSEC MistakeGroup-IB · Published 23 Jul
On the same topics
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 25 Oct
- Koktevrat – wieloetapowy Android RAT dystrybuowany pod przykrywką aplikacji MandatGOcert.orange.pl · Published 9 Sep
- New TrickMo Variant: Device Take Over malware targeting Banking, Fintech, Wallet & Auth appsThreatFabric · Published 1 Oct 2024
