17 Apr 2026

Zimperium, the pioneer in AI-empowered mobile security, announces new findings from its zLabs threat research team identifying four active Android banking trojan campaigns—RecruitRat, SaferRat, Astrinox, and Massiv—collectively targeting more than 800 banking, cryptocurrency, and social media applications worldwide.

The research highlights how these malware families are evolving beyond basic credential theft, using sophisticated phishing infrastructure, deceptive overlays, Accessibility abuse, screen capture, and anti-analysis techniques to evade detection and facilitate account takeover and financial fraud.