Zimperium Blog

Featured zLabs

Your Mobile App, Their Playground: The Dark Side of Virtualization

Zimperium zLabs has uncovered a sophisticated evolution of the GodFather banking malware that leverages an advanced on-device virtualization technique to hijack several legitimate applications.

The latest from Zimperium:

MAPS

Prevent Mobile Bot Abuse: A Guide for App Security Teams

Learn how to protect your mobile app from sophisticated bot attacks with effective in-app security measures that detect and prevent various bot tactics in real-time.

Threat Research zLabs

Hook Version 3: The Banking Trojan with The Most Advanced Capabilities

A full list of Indicators of Compromise (IOCs) for Hook v3 details the advanced Android banking trojan’s use of overlays, phishing, screen-streaming, and GitHub distribution with more than 100 remote commands.

Read All
Stay up to date with the latest cybersecurity trends, best practices, security vulnerabilities, and so much more.

View All

zLabs/Threat Research
The zLabs team delivers insights and research ahead of the market and advises organizations around the world on how to secure mobile applications and devices.

August 25, 2025

Hook Version 3: The Banking Trojan with The Most Advanced Capabilities

August 20, 2025

Rapid Response: Zimperium Detects Lazarus Stealer Campaign with Full Coverage and Additional Samples

August 14, 2025

Rapid Response: Zimperium’s Full Coverage of PhantomCard NFC-Relay Android Malware

August 13, 2025

The Root(ing) Of All Evil: Security Holes That Could Compromise Your Mobile Device

August 6, 2025

The Growing Threat of Mobile Infostealers

August 4, 2025

Extended Rapid Response: Zimperium Expands Detection of PlayPraetors Android RAT Campaign with Additional Samples and Targets

July 30, 2025

Rapid Response: Zimperium Detects All Reported Samples of Evolving Zanubis Android Banking Trojan

May 15, 2025

Preventing Malicious Mobile Apps from Taking Over iOS through App Vetting

April 30, 2025

Your Apps Are Leaking: The Hidden Data Risks on Your Phone, Part 2

April 23, 2025

From Lock Screen to Wallets: BTMOB RAT Now Targets Alipay PINs

April 16, 2025

Your Apps are Leaking: The Hidden Data Risks on your Phone, Part 1

April 14, 2025

Pragmatic Crocodilus: A New Variant In the Horizon

Mobile Application Protection Suite (MAPS)
Zimperium's MAPS is the world's only complete platform for DevSecOps teams to build secure mobile apps.

August 27, 2025

Prevent Mobile Bot Abuse: A Guide for App Security Teams

August 20, 2025

How App Attestation Stops API Abuse in Mobile Apps

August 4, 2025

Extended Rapid Response: Zimperium Expands Detection of PlayPraetors Android RAT Campaign with Additional Samples and Targets

July 10, 2025

The Critical Role of Supply Chain Resilience in Today's Digital Landscape

July 10, 2025

How Application Shielding Fits into the DevSecOps Framework

July 7, 2025

Banks Admit Cybersecurity is the Biggest Threat. Now What?

November 7, 2024

Now Available: Integrate Mobile App Scans into CI/CD Pipeline Using GitHub Actions

October 17, 2024

Debunking Five Myths About Mobile Security

October 10, 2024

ISM’s Guidelines for Enterprise Mobility

September 26, 2024

Zimperium Detects New Android Spyware Targeting South Korea

September 17, 2024

Zimperium Mobile Threat Defense (MTD) Achieves IRAP PROTECTED Status

September 12, 2024

A Network of Harm: Gigabud Threat and Its Associates

September 9, 2024

Unmasking SpyAgent: Zimperium’s Zero-Day Defense Against Cryptocurrency Theft

September 5, 2024

Preventing Infections of N-Day Exploits Delivered via Malicious Websites

September 5, 2024

Safeguarding Financial Data: Essential Cybersecurity Practices for Mobile Banking

September 4, 2024

Zimperium Welcomes Shashank Pathak to Our Go-to-Market Team in India

September 3, 2024

DAST Best Practices for Mobile Developers

August 28, 2024

Deep Dive into Phishing Chronology: Threats and Trends

August 26, 2024

Dynamic Application Security Testing vs. Static Application Security Testing

August 20, 2024

Securing Agency Devices: The Critical Need for Mobile App Vetting

August 19, 2024

Integrating DAST in the Development Cycle

August 12, 2024

BlankBot: A New Android Banking Trojan Cannot Evade on Device Machine Learning Protection

August 5, 2024

Top 7 Source Code Obfuscation Techniques

July 31, 2024

Unmasking the SMS Stealer: Targeting Several Countries with Deceptive Apps

July 30, 2024

Leveraging Zimperium’s Zero-Day Detection to Combat OilAlpha’s Remote Access Trojans

July 15, 2024

Phishing Campaigns and Rafel RAT: A Dangerous Duo

July 8, 2024

Understanding Rafel RAT and Its Role in Mobile Ransomware Attacks

Mobile Threat Detection (MTD)
Zimperium's MTD offers robust mobile security for enterprises, safeguarding both corporate and personal devices from advanced threats while ensuring privacy.

August 4, 2025

Extended Rapid Response: Zimperium Expands Detection of PlayPraetors Android RAT Campaign with Additional Samples and Targets

July 10, 2025

The Critical Role of Supply Chain Resilience in Today's Digital Landscape

July 7, 2025

Banks Admit Cybersecurity is the Biggest Threat. Now What?

June 3, 2025

Rapid Response: Zimperium Detects GhostSpy Android RAT

May 29, 2025

Rapid Response: Zimperium Detects All Reported Samples of Evolving Zanubis Android Banking Trojan

May 15, 2025

Preventing Malicious Mobile Apps from Taking Over iOS through App Vetting

May 14, 2025

Securing Every Android Work Device: Zimperium and Android Enterprise Enable Smarter, Safer Access

April 23, 2025

From Lock Screen to Wallets: BTMOB RAT Now Targets Alipay PINs

April 22, 2025

Rapid Response: Zimperium Detects SuperCardX NFC Relay Fraud Operation

April 16, 2025

Your Apps are Leaking: The Hidden Data Risks on your Phone, Part 1

April 14, 2025

Pragmatic Crocodilus: A New Variant In the Horizon

November 13, 2024

Mishing: The Rising Mobile Attack Vector Facing Every Organization

November 7, 2024

2022 Predictions: 5 Mobile Threats to Look for This Year

November 7, 2024

Chrome OS Now Second-Most Popular Desktop Operating System

November 7, 2024

4 Reasons Why Companies Need To Protect Employee Phones Today

October 30, 2024

Mishing in Motion: Uncovering the Evolving Functionality of FakeCall Malware

October 21, 2024

Zimperium’s Zero-Day Protection Against Water Makara Spear-Phishing Campaign

October 11, 2024

Expanding the Investigation: Deep Dive into Latest TrickMo Samples

October 10, 2024

ISM’s Guidelines for Enterprise Mobility

October 7, 2024

Zimperium’s Zero-Day Defense Against Octo2 Malware Targeting European Banks

October 7, 2024

iOS and the WebP Vulnerability

October 1, 2024

Zimperium Coverage on COLDRIVER Phishing Campaign

September 26, 2024

Zimperium Detects New Android Spyware Targeting South Korea

September 17, 2024

Zimperium Mobile Threat Defense (MTD) Achieves IRAP PROTECTED Status

September 9, 2024

Unmasking SpyAgent: Zimperium’s Zero-Day Defense Against Cryptocurrency Theft

September 5, 2024

Preventing Infections of N-Day Exploits Delivered via Malicious Websites

September 4, 2024

Zimperium Welcomes Shashank Pathak to Our Go-to-Market Team in India

August 20, 2024

Securing Agency Devices: The Critical Need for Mobile App Vetting

August 12, 2024

BlankBot: A New Android Banking Trojan Cannot Evade on Device Machine Learning Protection

July 23, 2024

Zimperium is Named a Leader in the Forrester Wave™ for MTD

July 15, 2024

Phishing Campaigns and Rafel RAT: A Dangerous Duo

July 8, 2024

Menu

Zimperium Blog

The latest from Zimperium:

Read AllStay up to date with the latest cybersecurity trends, best practices, security vulnerabilities, and so much more.

zLabs/Threat ResearchThe zLabs team delivers insights and research ahead of the market and advises organizations around the world on how to secure mobile applications and devices.

Hook Version 3: The Banking Trojan with The Most Advanced Capabilities

Rapid Response: Zimperium Detects Lazarus Stealer Campaign with Full Coverage and Additional Samples

Rapid Response: Zimperium’s Full Coverage of PhantomCard NFC-Relay Android Malware

The Root(ing) Of All Evil: Security Holes That Could Compromise Your Mobile Device

The Growing Threat of Mobile Infostealers

Extended Rapid Response: Zimperium Expands Detection of PlayPraetors Android RAT Campaign with Additional Samples and Targets

Behind Random Words: DoubleTrouble Mobile Banking Trojan Revealed

The Dark Side of Romance: SarangTrap Extortion Campaign

Konfety Returns: Classic Mobile Threat with New Evasion Techniques

Your Mobile App, Their Playground: The Dark Side of Virtualization

Privilege Escalation: Preventing Mobile Apps from Taking Over on Android

Rapid Response: Zimperium Detects GhostSpy Android RAT

Rapid Response: Zimperium Detects All Reported Samples of Evolving Zanubis Android Banking Trojan

Preventing Malicious Mobile Apps from Taking Over iOS through App Vetting

Your Apps Are Leaking: The Hidden Data Risks on Your Phone, Part 2

From Lock Screen to Wallets: BTMOB RAT Now Targets Alipay PINs

Your Apps are Leaking: The Hidden Data Risks on your Phone, Part 1

Pragmatic Crocodilus: A New Variant In the Horizon

Mobile Application Protection Suite (MAPS)Zimperium's MAPS is the world's only complete platform for DevSecOps teams to build secure mobile apps.

Prevent Mobile Bot Abuse: A Guide for App Security Teams

How App Attestation Stops API Abuse in Mobile Apps

Extended Rapid Response: Zimperium Expands Detection of PlayPraetors Android RAT Campaign with Additional Samples and Targets

The Critical Role of Supply Chain Resilience in Today's Digital Landscape

How Application Shielding Fits into the DevSecOps Framework

Banks Admit Cybersecurity is the Biggest Threat. Now What?

Now Available: Integrate Mobile App Scans into CI/CD Pipeline Using GitHub Actions

Debunking Five Myths About Mobile Security

ISM’s Guidelines for Enterprise Mobility

Zimperium Detects New Android Spyware Targeting South Korea

Zimperium Mobile Threat Defense (MTD) Achieves IRAP PROTECTED Status

A Network of Harm: Gigabud Threat and Its Associates

Unmasking SpyAgent: Zimperium’s Zero-Day Defense Against Cryptocurrency Theft

Preventing Infections of N-Day Exploits Delivered via Malicious Websites

Safeguarding Financial Data: Essential Cybersecurity Practices for Mobile Banking

Zimperium Welcomes Shashank Pathak to Our Go-to-Market Team in India

DAST Best Practices for Mobile Developers

Deep Dive into Phishing Chronology: Threats and Trends

Dynamic Application Security Testing vs. Static Application Security Testing

Securing Agency Devices: The Critical Need for Mobile App Vetting

Integrating DAST in the Development Cycle

BlankBot: A New Android Banking Trojan Cannot Evade on Device Machine Learning Protection

Top 7 Source Code Obfuscation Techniques

Unmasking the SMS Stealer: Targeting Several Countries with Deceptive Apps

Leveraging Zimperium’s Zero-Day Detection to Combat OilAlpha’s Remote Access Trojans

Phishing Campaigns and Rafel RAT: A Dangerous Duo

Understanding Rafel RAT and Its Role in Mobile Ransomware Attacks

Mobile Threat Detection (MTD)Zimperium's MTD offers robust mobile security for enterprises, safeguarding both corporate and personal devices from advanced threats while ensuring privacy.

Extended Rapid Response: Zimperium Expands Detection of PlayPraetors Android RAT Campaign with Additional Samples and Targets

The Critical Role of Supply Chain Resilience in Today's Digital Landscape

Banks Admit Cybersecurity is the Biggest Threat. Now What?

Rapid Response: Zimperium Detects GhostSpy Android RAT

Rapid Response: Zimperium Detects All Reported Samples of Evolving Zanubis Android Banking Trojan

Preventing Malicious Mobile Apps from Taking Over iOS through App Vetting

Securing Every Android Work Device: Zimperium and Android Enterprise Enable Smarter, Safer Access

From Lock Screen to Wallets: BTMOB RAT Now Targets Alipay PINs

Rapid Response: Zimperium Detects SuperCardX NFC Relay Fraud Operation

Your Apps are Leaking: The Hidden Data Risks on your Phone, Part 1

Pragmatic Crocodilus: A New Variant In the Horizon

Mishing: The Rising Mobile Attack Vector Facing Every Organization

2022 Predictions: 5 Mobile Threats to Look for This Year

Chrome OS Now Second-Most Popular Desktop Operating System

4 Reasons Why Companies Need To Protect Employee Phones Today

Mishing in Motion: Uncovering the Evolving Functionality of FakeCall Malware

Zimperium’s Zero-Day Protection Against Water Makara Spear-Phishing Campaign

Expanding the Investigation: Deep Dive into Latest TrickMo Samples

ISM’s Guidelines for Enterprise Mobility

Zimperium’s Zero-Day Defense Against Octo2 Malware Targeting European Banks

iOS and the WebP Vulnerability

Zimperium Coverage on COLDRIVER Phishing Campaign

Zimperium Detects New Android Spyware Targeting South Korea

Zimperium Mobile Threat Defense (MTD) Achieves IRAP PROTECTED Status

Unmasking SpyAgent: Zimperium’s Zero-Day Defense Against Cryptocurrency Theft

Preventing Infections of N-Day Exploits Delivered via Malicious Websites

Zimperium Welcomes Shashank Pathak to Our Go-to-Market Team in India

Securing Agency Devices: The Critical Need for Mobile App Vetting

Read All
Stay up to date with the latest cybersecurity trends, best practices, security vulnerabilities, and so much more.

zLabs/Threat Research
The zLabs team delivers insights and research ahead of the market and advises organizations around the world on how to secure mobile applications and devices.

Mobile Application Protection Suite (MAPS)
Zimperium's MAPS is the world's only complete platform for DevSecOps teams to build secure mobile apps.

Mobile Threat Detection (MTD)
Zimperium's MTD offers robust mobile security for enterprises, safeguarding both corporate and personal devices from advanced threats while ensuring privacy.

Make mobile security
your first priority.