Malicious Actors Spread Malware Via Meta's Advertising System

"Bitdefender warns that a Meta malvertising campaign has expanded to Android phones. The research discovered malicious ads that offer a free TradingView Premium app for Android. Rather than leading users to a legitimate software, however, these ads take victims to a sophisticated crypto-stealing trojan, which the research as "an evolved version of the Brokewell malware." The research's most recent analysis revealed the campaign remains active and has leveraged at least 75 malicious ads since mid-July."

"As of August 22nd, 2025, the ads have reached tens of thousands of users in the European Union. The installed is more than a credential stealer. Instead, it is a spyware and remote access trojan (RAT) with capabilities that include: The research asserts that this campaign is "one of the most advanced Android threats seen in a malvertising campaign to date.""

Bitdefender found malicious Meta ads offering a free TradingView Premium Android app that instead deliver a sophisticated crypto-stealing trojan identified as an evolved version of the Brokewell malware. The campaign remains active and has used at least 75 malicious ads since mid-July, reaching tens of thousands of users in the European Union as of August 22, 2025. The installed payload is more than a credential stealer; it functions as spyware and a remote access trojan (RAT) with multiple capabilities. The campaign represents one of the most advanced Android threats observed in a malvertising operation to date.

Read at Securitymagazine