Emergence of Mirax Android Trojan Highlights Growing Mobile Security Threats
A new Android banking trojan, known as Mirax, has been identified targeting devices across Europe. The malware, which operates as a malware-as-a-service, has already compromised over 200,000 accounts, primarily affecting Spanish-speaking users. The attack begins with social engineering tactics on platforms like Facebook and Instagram, leading users to download fraudulent apps that serve as droppers for the Mirax malware. Once installed, the malware decrypts payloads and establishes WebSockets-based communication channels, allowing for remote device control and data compromise. The trojan also turns infected devices into residential proxy nodes, facilitating anonymized network attacks.