New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs

A new Android banking trojan is turning an app download into a banking PIN trap. Called RemControl, it hides behind fake download pages for a television streaming app, then waits for banking apps to open. The campaign uses pages that look like Google Play listings, even though the streaming app is not offered there. In one Italian campaign, the pages delivered the malicious installer only to Android visitors with Italian IP addresses, hiding the trap from others. Researchers from Group-IB identified RemControl and traced its activity to samples first seen in July 2026. Group-IB said in a report shared with Cyber Security News (CSN) that more than 30 banking institutions across Europe, the Middle East and Canada have matching...

Read the full article at the source.