RemControl Android banking malware targets Europe and Canada

Group-IB uncovered RemControl, a new Android malware-as-a-service platform spreading via fake TVTap IPTV pages with over 30 phishing overlays to steal banking credentials. The campaign targets users in Italy, France, Spain, Poland, Portugal, Canada, and the Middle East.

• Over 30 phishing overlays designed to steal banking credentials
• Targets users in Italy, France, Spain, Poland, Portugal and Canada
• Malware blocks Google Play Protect checks via a VPN service
• Operator tracked as UNKK, possibly linked to Medusa trojan