Massiv fake IPTV SMS-phishing campaign
Campaign
Summary
Hide ▲
Show ▼
The Massiv distribution campaign is using SMS phishing and fake IPTV apps to deliver Android malware, creating a direct path to mobile banking theft and device takeover. The operation has been seen in a limited number of targeted campaigns, which raises the risk for users searching for online TV apps. One observed wave also shows tailored abuse against gov.pt users in Portugal. Reported activity across Spain, Portugal, France, and Turkey suggests a recurring cross-border distribution pattern.
Related Happenings
BTMOB phishing campaign targeting Brazil and Latin America
Campaign
H score39
First: 29.05.2026 00:10
Last: 29.05.2026 00:10
Sources 1
About this happening:
BTMOB phishing activity is using localized fake-app lures to target users in Brazil and Latin America, increasing the risk of malicious installs and account compromise...
BTMOB phishing campaign targeting Brazil and Latin America
CampaignAbout this happening: BTMOB phishing activity is using localized fake-app lures to target users in Brazil and Latin America, increasing the risk of malicious installs and account compromise...
Grandoreiro DLL side-loading campaign targeting banks in Portugal
Campaign
H score26
First: 27.05.2026 19:10
Last: 27.05.2026 19:10
Sources 1
About this happening:
Grandoreiro is running a new DLL side-loading campaign against banks in Portugal, extending a long-lived banking-malware operation into 2026. The latest wave uses...
Grandoreiro DLL side-loading campaign targeting banks in Portugal
CampaignAbout this happening: Grandoreiro is running a new DLL side-loading campaign against banks in Portugal, extending a long-lived banking-malware operation into 2026. The latest wave uses...
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
Campaign
H score33
First: 11.05.2026 18:15
Last: 11.05.2026 18:15
Sources 1
About this happening:
The TrickMo operators ran an active TikTok-themed campaign between January and February 2026, targeting banking and wallet users in France, Italy and Austria....
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
CampaignAbout this happening: The TrickMo operators ran an active TikTok-themed campaign between January and February 2026, targeting banking and wallet users in France, Italy and Austria....
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
Campaign
H score34
First: 08.05.2026 18:08
Last: 08.05.2026 18:08
Sources 1
About this happening:
The CallPhantom fraud campaign pushed 28 fake call-history Android apps through the Google Play Store, causing financial loss for users who paid for fabricated dat...
CallPhantom Google Play fraud campaign targeting Android users in India and Asia-Pacific
CampaignAbout this happening: The CallPhantom fraud campaign pushed 28 fake call-history Android apps through the Google Play Store, causing financial loss for users who paid for fabricated dat...
Toronto Police arrests in Project Lighthouse SMS blaster case
Law Enforcement
H score33
First: 27.04.2026 23:00
Last: 27.04.2026 23:00
Sources 1
About this happening:
Canadian authorities arrested three men and seized SMS blaster devices in Project Lighthouse, a cybercrime case involving phishing texts that mimicked trusted senders....
Toronto Police arrests in Project Lighthouse SMS blaster case
Law EnforcementAbout this happening: Canadian authorities arrested three men and seized SMS blaster devices in Project Lighthouse, a cybercrime case involving phishing texts that mimicked trusted senders....
Timeline
-
19.02.2026 12:24 2 articles · 4mo ago
Massiv Android trojan disclosure
Initial DisclosureThreatFabric disclosed Massiv, a new Android trojan aimed at mobile banking users and distributed through fake IPTV apps and SMS phishing; the malware supports screen streaming, keylogging, SMS interception, fake overlays, and remote control to enable device takeover and fraudulent transactions.
Show sources
- Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users — thehackernews.com — 19.02.2026 12:24
- Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking Users — thehackernews.com — 19.02.2026 12:24