CYFIRMA Research: Android/BankBot- YNRK Mobile Banking Trojan
Update: 2025-11-04
Description
New Malware Analysis Report
Our latest research uncovers Android/BankBot-YNRK, a mobile banking trojan disguised as a legitimate app such as Google News.
Key findings:
• Abuses Accessibility Services for remote control
• Uses C2 servers at ping.ynrkone[.]top for device commands
• Targets financial and cryptocurrency applications
• Employs code obfuscation via nmm-protect
• Capable of exfiltrating sensitive data and performing unauthorized transactions
Link to the Research Report: https://www.cyfirma.com/research/investigation-report-android-bankbot-ynrk-mobile-banking-trojan/
#MalwareAnalysis #Android #BankBot #CyberSecurity #CYFIRMAResearch #ThreatResearch #ExternalThreatLandscapeManagement #ETLM
https://www.cyfirma.com/
Comments
In Channel
Download from Google Play
Download from App Store
United States00:00
00:00
x
