#banking-trojan

#banking-trojan

"Instead of relying solely on traditional command-and-control (C2) servers that can be taken down, these attackers are leveraging GitHub repositories to host malware configurations," McAfee Labs researchers Harshil Patel and Prabudh Chakravorty said in a report. "When law enforcement or security researchers shut down their C2 infrastructure, Astaroth simply pulls fresh configurations from GitHub and keeps running."

Identified over 16,000 URLs related to PlayPraetor attacks, indicating a globally coordinated campaign targeting Android users with sophisticated deceit and malware.