Massiv fake IPTV SMS-phishing campaign
Campaign
Summary
Hide ▲
Show ▼
The Massiv distribution campaign is using SMS phishing and fake IPTV apps to deliver Android malware, creating a direct path to mobile banking theft and device takeover. The operation has been seen in a limited number of targeted campaigns, which raises the risk for users searching for online TV apps. One observed wave also shows tailored abuse against gov.pt users in Portugal. Reported activity across Spain, Portugal, France, and Turkey suggests a recurring cross-border distribution pattern.
Related Happenings
Grandoreiro DLL side-loading campaign targeting banks in Portugal
Campaign
First: 27.05.2026 19:10
Last: 27.05.2026 19:10
Sources 1
About this happening:
**Grandoreiro** is running a new **DLL side-loading** campaign against **banks in Portugal**, extending a long-lived banking-malware operation into **2026**. The latest wave uses...
Grandoreiro DLL side-loading campaign targeting banks in Portugal
CampaignAbout this happening: **Grandoreiro** is running a new **DLL side-loading** campaign against **banks in Portugal**, extending a long-lived banking-malware operation into **2026**. The latest wave uses...
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
Campaign
First: 11.05.2026 18:15
Last: 11.05.2026 18:15
Sources 1
About this happening:
The **TrickMo** operators ran an active **TikTok-themed** campaign between **January and February 2026**, targeting **banking and wallet users** in **France, Italy and Austria**....
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
CampaignAbout this happening: The **TrickMo** operators ran an active **TikTok-themed** campaign between **January and February 2026**, targeting **banking and wallet users** in **France, Italy and Austria**....
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
Campaign
First: 08.05.2026 18:08
Last: 08.05.2026 18:08
Sources 1
About this happening:
The **CallPhantom** fraud campaign pushed **28 fake call-history Android apps** through the **Google Play Store**, causing **financial loss** for users who paid for fabricated dat...
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
CampaignAbout this happening: The **CallPhantom** fraud campaign pushed **28 fake call-history Android apps** through the **Google Play Store**, causing **financial loss** for users who paid for fabricated dat...
Toronto Police arrests in Project Lighthouse SMS blaster case
Law Enforcement
First: 27.04.2026 23:00
Last: 27.04.2026 23:00
Sources 1
About this happening:
Canadian authorities **arrested three men** and seized **SMS blaster** devices in **Project Lighthouse**, a cybercrime case involving phishing texts that mimicked trusted senders....
Toronto Police arrests in Project Lighthouse SMS blaster case
Law EnforcementAbout this happening: Canadian authorities **arrested three men** and seized **SMS blaster** devices in **Project Lighthouse**, a cybercrime case involving phishing texts that mimicked trusted senders....
NGate Android Brazil fake-app and fake-lottery campaign
Campaign
First: 21.04.2026 12:00
Last: 21.04.2026 12:00
Sources 1
About this happening:
A **NGate** campaign has been active since **November 2025**, targeting primarily **Android devices in Brazil** and using **fake-app** and **fake-lottery** lures to spread a malic...
NGate Android Brazil fake-app and fake-lottery campaign
CampaignAbout this happening: A **NGate** campaign has been active since **November 2025**, targeting primarily **Android devices in Brazil** and using **fake-app** and **fake-lottery** lures to spread a malic...
Timeline
-
19.02.2026 12:24 2 articles · 3mo ago
Massiv Android trojan disclosure
Initial DisclosureThreatFabric disclosed Massiv, a new Android trojan aimed at mobile banking users and distributed through fake IPTV apps and SMS phishing; the malware supports screen streaming, keylogging, SMS interception, fake overlays, and remote control to enable device takeover and fraudulent transactions.
Show sources
- Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users — thehackernews.com — 19.02.2026 12:24
- Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users — thehackernews.com — 19.02.2026 12:24