#Albiriox

🔍 Fresh, actionable threat intelligence for security leaders.
This report covers three high-impact malware families affecting Windows and mobile environments:
🔹 #Albiriox, an Android banking trojan offered as MaaS, combining VNC-based remote control and overlays to bypass protections in 400+ financial apps.
🔹 #OctoRAT, a .NET-based Windows RAT with UAC bypass, credential theft, proxying, and full remote control for long-term access.
🔹 #GuLoader, a downloader using heavily obfuscated PowerShell, shellcode, and process injection to deliver RATs and infostealers.

👨‍💻 Explore an exclusive report with #IOCs, YARA, and detection insights in the TI Lookup Premium plan: intelligence.any.run/reports/6

New to TI Lookup? Start a trial to explore more in-depth analyses of active threats and APTs: any.run/plans-ti/?utm_source=m

#cybersecurity #infosec

2025-12-04

⚠️ New Android malware #Albiriox is spreading fast. It lets attackers take over phones and drain bank or crypto accounts, targeting 400+ apps. If you get unknown APKs via SMS or WhatsApp, do NOT install them

Read: hackread.com/albiriox-android-

#CyberSecurity #MaaS #InfoSec #Android #Malware

2025-12-01

Neue Android‑Malware „Albiriox“ (MaaS)

Albiriox ist ein Android‑Trojaner, der seit September 2025 als Malware‑as‑a‑Service (MaaS) angeboten wird. Das bedeutet, dass Kriminelle die Schadsoftware einfach mieten können, ohne eigene Programmierkenntnisse zu besitzen. Der cyberkriminelle Anbietende stellt dabei einen Online‑Builder bereit, mit dem Kunden die Malware individuell zusammenstellen und sofort einsetzen können. Kund:innen selbst brauchen dafür kaum Informatik-Kenntnisse.

maniabel.work/archiv/604

#infosec #infosecnews #malware #trojaner #android #albiriox #odf #BeDiS

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst