CyberHappenings logo
☰
Home Browse About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial Data

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Two Android trojans, BankBot-YNRK and DeliveryRAT, are stealing financial data from compromised devices. BankBot-YNRK targets Android devices running versions 13 and below, while DeliveryRAT is distributed as malware-as-a-service (MaaS) via Telegram. Both trojans use sophisticated techniques to evade detection and harvest sensitive information. BankBot-YNRK checks for virtualized environments and specific device models to ensure it runs only on real devices. It targets financial apps and uses accessibility services to perform malicious actions. DeliveryRAT, meanwhile, is advertised through a Telegram bot and targets Russian Android users, often masquerading as legitimate apps. Both trojans have been active since mid-2024, with BankBot-YNRK focusing on Android devices and DeliveryRAT targeting a broader range of apps and services.

Timeline

  1. 03.11.2025 13:14 1 articles · 7d ago

    BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial Data

    BankBot-YNRK and DeliveryRAT are two distinct Android trojans that have been actively stealing financial data from compromised devices. BankBot-YNRK targets Android devices running versions 13 and below, using advanced techniques to evade detection and harvest sensitive information. DeliveryRAT is distributed through a Telegram bot and targets Russian Android users, often disguising itself as legitimate apps. Both trojans employ sophisticated methods to maintain persistence and perform malicious actions, including using accessibility services and hiding their icons from the home screen. Additionally, over 760 Android apps have been found misusing NFC to steal payment data, further highlighting the ongoing threat to mobile security.

    Show sources
    Open in new tab

Information Snippets