DroidBot, a new Android spyware detected in 2024, mimics banking and security apps while exploiting Android Accessibility Services, aiming mostly at financial institutions. Developed by a Turkish-speaking group, DroidBot can intercept messages, take screenshots, record keystrokes, and remotely control devices. So far, 17 affiliate groups have used it against 77 targets across Europe, mainly in the UK, Italy, France, Spain, Turkey, and Portugal. Cleafy Labs advise Android users to avoid unknown apps, regularly update their devices, and use trusted antivirus tools.

New CrystalRAT malware adds RAT, stealer and prankware features – BleepingComputer
New CrystalRAT malware adds RAT, stealer and prankware features BleepingComputer


