The “FinStealer” malware campaign targets Indian bank customers via fraudulent mobile apps, utilizing Trojan.rewardsteal/joxpk to extract banking credentials and personal data. Key techniques include advanced obfuscation, dual command-and-control, and WebView exploitation. Security experts recommend downloading apps only from official sources and conducting regular audits to combat this sophisticated threat.
![](https://healsecurity.com/wp-content/uploads/2025/02/google_logo.png)
Malware Sneaks Into Apple & Google
Cybersecurity firm Kaspersky discovered a Trojan malware, SparkCat, that had penetrated Apple’s App Store and Google Play, posing a major threat to the crypto world.