.jpg "New RemControl Android banking malware targets users in Europe and Canada")
RemControl is a new Android malware-as-a-service platform spread through malvertising and fake Google Play pages impersonating the TVTap IPTV app, with phishing overlays aimed at stealing banking credentials. Group-IB says it targets users across Europe, Canada, and the Middle East, uses a VPN trick to block Google Play protections, and may have been built with AI assistance. #RemControl #TVTap #GroupIB #ToxicPanda #UNKK
Keypoints
- RemControl is an Android MaaS platform distributed through malvertising.
- The malware impersonates the TVTap IPTV app on fake Google Play pages.
- It uses more than 30 phishing overlays to steal banking credentials.
- RemControl blocks Google Play checks by starting a VPN service during installation.
- Researchers linked the operator to UNKK and suspect a connection to Medusa.