Archive · 5 Dec 2025
New Android Malware Albiriox Hijacks Banking Apps
A new type of Android malware called Albiriox has been found.
It can take control of banking apps on your phone and make transactions without needing your password or the special codes sent to your phone.
This malware is spread through fake apps and messages on WhatsApp and Telegram.
Once installed, it tricks the phone into thinking it's you making the transactions.
Experts say it's very dangerous because it's hard to detect and can cause a lot of harm.
They advise only downloading apps from the official Google Play Store and keeping your phone updated to stay safe.
Albiriox is a new Android malware that can hijack banking apps and authorize transactions without user credentials or OTP verification.
It is distributed through fake apps, cloned Play Store pages, and messages on WhatsApp and Telegram.
The malware abuses Android's accessibility services to execute transactions from within a user's banking app.
Over 400 fake apps linked to Albiriox have been identified, targeting financial and banking services.
Albiriox is being distributed through a Malware-as-a-Service (MaaS) model, making it accessible to cybercriminals with minimal technical expertise.
- Who
- Cybersecurity researchers and fraud-prevention firm Cleafy
- What
- Discovery of a new Android malware called Albiriox
- When
- Recently discovered, exact date not specified
- Where
- Primarily distributed in Russia and neighboring regions
- Why
- To hijack banking apps and authorize transactions without user credentials or OTP verification
- Malware Name
- Albiriox
- Distribution Method
- Fake apps, cloned Play Store pages, WhatsApp/Telegram messages
- Targeted Apps
- Banking, digital payment, fintech, and cryptocurrency apps
- Number of Fake Apps
- Over 400
- Malware Model
- Malware-as-a-Service (MaaS)
- Primary Regions
- Russia and neighboring regions