Hackers forged Google Play Store pages to carry out cryptocurrency mining and wallet hijacking attacks targeting Brazilian users
Hackers have launched Android malware attacks in Brazil by spoofing a phishing page that mimics the Google Play Store. Currently, all known victims are located in Brazil.
The attackers set up a phishing website that closely resembles Google Play, enticing users to download a fake application called "INSS Reembolso." Once installed, the application releases hidden malicious code in stages and loads it directly into memory, leaving no visible files on the device, which makes it highly stealthy. One of the core functions of the malware is cryptocurrency mining, with an embedded XMRig mining program compiled for ARM devices that silently connects to the attacker's controlled mining server in the background. The program monitors battery level, temperature, and device usage status, dynamically adjusting mining behavior to evade detection, and bypasses Android's background process management mechanism by looping silent audio files.
Some variants also include banking trojans that can overlay fake pages on the USDT transfer interface of Binance and Trust Wallet, silently replacing the recipient address. Additionally, the malware supports various remote control commands such as recording, screenshotting, keylogging, and remote locking of the device.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

SEC Commissioner Hester Peirce Proposes Reshaping Financial Regulation with Blockchain and Zero-Knowledge Proofs

Hester Peirce: The Financial System Faces Two Paths

Hedera IDTrust joins IBM Cloud Catalog for AI agents

Raiffeisen’s crypto deal could reach 18 million customers. How many can actually trade?

XRPL to Implement Major Upgrade on October 5: Adding Permission Delegation Feature

American Gen Z Starts Investing at an Average Age of 19, Nearly Half Interested in Cryptocurrency

Hack VC Co-founder Has Not Contacted Hsin-Ju for Over 10 Months, Overseas Use of USD Stablecoin Considered

Nearly $20 million in XRP drained from 6,678 wallets across six attack waves

Binance Under Scrutiny Again for Iran-Related Trading

Zoomex Deepens Its Real-World Asset Strategy

FinTra Holding Launches the Universal Payment Network (UPN) Consortium

Why Mastercard’s $25 billion crypto expansion isn’t what it seems

Proposal to Expropriate Digital Assets in Special Cases

Bernstein Research Report: Why Can Gold Still Surge to $5,700 Even with Continued Rate Hikes by the Fed?

People's Bank of China Issues Financial Education Campaign, Warns of Virtual Currency Risks

Russia Circumvents Sanctions with $7 Billion Through Western Banks

WEEX P2P now supports XOF, XAF & CDF—Merchant Recruitment Now Open

Coldcard whitehats move 52.37 BTC to recovery trust

Verda AI Cloud Financing: From $117 to $155 Million, Total Capital Over $200 Million

Populous to Host RealFi x Asia Stablecoin Conference in Seoul on October 1

South Korea to test CBDC backed deposit tokens for government expenses

Pragma flags 6 price feeds as critical risk after 3.5M dollar Starknet exploit

Bridge34 to Host 'The Bridge Summit' in Seoul on 28th

Virtual Kidnappings in Venezuela Demand Ransoms in USDT

Liquid Network attacker crossed into theft: Immunefi CEO

Zcash Foundation disowns ZRC-20 and CASH token

Blink Wallet Halts Services After Custodial Accounts Compromised

Kimi Code Desktop Client Launched by Dark Side of the Moon, Supporting macOS and Windows

Crypto Scam: Business Leader Loses 600,000 Euros on a Fake Platform










