While the Google Play Store is generally safe, you can still get malware on your phone from other sources, like scam texts.

A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified ...

Hirudo targets eight Indonesian banking apps with patched replacements that can bypass signature, accessibility, and ...

Doogee, Cubot, and other brands were allegedly compromised in production and tricked into shipping devices with malware.

Hirudo Android banking trojan replaces legitimate apps to bypass security checks, steal financial credentials and target ...

RemControl, a new Android banking trojan, spreads through a fake TVTap app, blocks Play Protect and steals PINs from bank customers.

Researchers have uncovered YuanKong, an Android remote access trojan that can control infected phones, capture payment PINs, ...

RATHat Android malware abuses Gemini AI and Accessibility features to control infected phones and steal banking data.

RemControl Android banking trojan hides behind fake streaming app pages to steal banking PINs from Italian users.

RatHat Android malware uses AI to steal banking credentials, intercept two-factor authentication codes and reconstruct your PIN from touch inputs.

Cleafy traced nearly 100 RatHat console deployments since April 2026, with the platform building malware and using Gemini to rank victims.

Midnight Mimosa malware ships in the firmware of cheap Android phones, runs ad fraud, turns devices into proxies, and can’t ...