Massiv fake IPTV SMS-phishing campaign
Campaign
Summary
Hide ▲
Show ▼
The Massiv distribution campaign is using SMS phishing and fake IPTV apps to deliver Android malware, creating a direct path to mobile banking theft and device takeover. The operation has been seen in a limited number of targeted campaigns, which raises the risk for users searching for online TV apps. One observed wave also shows tailored abuse against gov.pt users in Portugal. Reported activity across Spain, Portugal, France, and Turkey suggests a recurring cross-border distribution pattern.
Related Happenings
BTMOB phishing campaign targeting Brazil and Latin America
Campaign
H score39
First: 29.05.2026 00:10
Last: 29.05.2026 00:10
Sources 1
About this happening:
**BTMOB** phishing activity is using localized fake-app lures to target users in **Brazil** and **Latin America**, increasing the risk of malicious installs and account compromise...
BTMOB phishing campaign targeting Brazil and Latin America
CampaignAbout this happening: **BTMOB** phishing activity is using localized fake-app lures to target users in **Brazil** and **Latin America**, increasing the risk of malicious installs and account compromise...
Grandoreiro DLL side-loading campaign targeting banks in Portugal
Campaign
H score26
First: 27.05.2026 19:10
Last: 27.05.2026 19:10
Sources 1
About this happening:
**Grandoreiro** is running a new **DLL side-loading** campaign against **banks in Portugal**, extending a long-lived banking-malware operation into **2026**. The latest wave uses...
Grandoreiro DLL side-loading campaign targeting banks in Portugal
CampaignAbout this happening: **Grandoreiro** is running a new **DLL side-loading** campaign against **banks in Portugal**, extending a long-lived banking-malware operation into **2026**. The latest wave uses...
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
Campaign
H score33
First: 11.05.2026 18:15
Last: 11.05.2026 18:15
Sources 1
About this happening:
The **TrickMo** operators ran an active **TikTok-themed** campaign between **January and February 2026**, targeting **banking and wallet users** in **France, Italy and Austria**....
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
CampaignAbout this happening: The **TrickMo** operators ran an active **TikTok-themed** campaign between **January and February 2026**, targeting **banking and wallet users** in **France, Italy and Austria**....
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
Campaign
H score34
First: 08.05.2026 18:08
Last: 08.05.2026 18:08
Sources 1
About this happening:
The **CallPhantom** fraud campaign pushed **28 fake call-history Android apps** through the **Google Play Store**, causing **financial loss** for users who paid for fabricated dat...
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
CampaignAbout this happening: The **CallPhantom** fraud campaign pushed **28 fake call-history Android apps** through the **Google Play Store**, causing **financial loss** for users who paid for fabricated dat...
Toronto Police arrests in Project Lighthouse SMS blaster case
Law Enforcement
H score33
First: 27.04.2026 23:00
Last: 27.04.2026 23:00
Sources 1
About this happening:
Canadian authorities **arrested three men** and seized **SMS blaster** devices in **Project Lighthouse**, a cybercrime case involving phishing texts that mimicked trusted senders....
Toronto Police arrests in Project Lighthouse SMS blaster case
Law EnforcementAbout this happening: Canadian authorities **arrested three men** and seized **SMS blaster** devices in **Project Lighthouse**, a cybercrime case involving phishing texts that mimicked trusted senders....
Timeline
-
19.02.2026 12:24 2 articles · 4mo ago
Massiv Android trojan disclosure
Initial DisclosureThreatFabric disclosed Massiv, a new Android trojan aimed at mobile banking users and distributed through fake IPTV apps and SMS phishing; the malware supports screen streaming, keylogging, SMS interception, fake overlays, and remote control to enable device takeover and fraudulent transactions.
Show sources
- Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users — thehackernews.com — 19.02.2026 12:24
- Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users — thehackernews.com — 19.02.2026 12:24