2 viruses want to empty your bank accounts

Two new viruses have recently been spotted on Android after being offered on the dark web. Named Gigabud and Spynoteboth viruses have the same goal: to siphon off victims’ bank accounts from their smartphones.

It is Zimperium who spotted the two malware programs circulating on Android systems. Initially launched in August 2024a phishing campaign exploits both tools to attack banking applications installed on victims’ devices. Both viruses then attempt to steal banking credentials.

Gigabud is associated with Spynote and presents itself as a RAT (Remote Administration Tool) that allows remote commands to be launched and the malware to be controlled.

Zimperium is said to have spotted no less than 79 phishing sites associated with the two viruses, each inviting visitors to download infected mobile applications, protected by a packer which thus hides the malware from threat detection tools.

In total, these are 50 mobile applications which are targeted by both tools, including 40 banks and 10 cryptocurrency platforms.