A recent investigation uncovered an updated version of GhostBat, an Android malware family targeting 60 banking and payment applications in India. Spread through fraudulent government-service messages and malicious app downloads, GhostBat exploits Android Accessibility Services to steal payment PINs, intercept SMS messages, and collect sensitive data. Researchers identified a transparent overlay technique that captures PIN entries as victims interact with legitimate banking apps, making the attack difficult to recognize. Encrypted loaders and remotely configurable settings further complicate detection. The findings highlight how attackers are advancing mobile banking fraud through increasingly sophisticated techniques designed to evade detection and compromise financial transactions.
Read the full report here.
