Description

CYFIRMA research exposes Lazarus Stealer — a stealthy Android banking malware targeting Russian financial institutions.

 Key Attack Vectors:

• Overlay Attack: Displays fake banking login screens to steal card details & account credentials.
• Silent SMS Notification Blocking: Obtains default SMS handler rights to suppress OTP alerts from the victim’s view.
• Real-Time OTP Harvesting: Captures verification codes instantly to bypass multi-factor authentication.
• Covert C2 Communication: Sends stolen data to attacker-controlled servers.

Link to the Research Report: https://www.cyfirma.com/research/lazarus-stealer-android-malware-for-russian-bank-credential-theft-through-overlay-and-sms-manipulation/

#AndroidMalware #BankingTrojan #OverlayAttack #SMSInterception #OTPTheft #CyberThreatIntel #MobileSecurity #CYFIRMAResearch #CYFIRMA #ETLM #ExternalThreatLandscapeManagement 

https://www.cyfirma.com/