Security1 hOctober 27, 2026, 20:36

Malicious Android apps pose as fuel maps and drone radars to spread ZloyRAT

F6 researchers found a campaign targeting Russian drivers with fake apps for fuel station maps, speed cameras and drone alerts that install the ZloyRAT Android trojan. The malware steals SMS, contacts and data from more than 60 banking apps and Telegram.

The Record

Open source

Malicious Android apps pose as fuel maps and drone radars to spread ZloyRAT

Trojan hides in apps about fuel stations, cameras and drones
ZloyRAT steals SMS, contacts and data from 60+ banking apps
Apps promoted via a website registered in early October
F6 previously found 800+ samples of similar malware in such services

#Android#Telegram#ZloyRAT

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets

Security

Malicious npm Package Poses as Twilio Security Tool, Steals Credentials

Mark Cuban says social media-fueled AI backlash poses a bigger threat than the technology itself

Science

Malicious Android apps pose as fuel maps and drone radars to spread ZloyRAT

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets

Malicious npm Package Poses as Twilio Security Tool, Steals Credentials

Mark Cuban says social media-fueled AI backlash poses a bigger threat than the technology itself

US Army AH-64 Apaches down three drones in air-to-air test cued by Sentinel radar