GoKawiilGroup-IB uncovers RemControl Android malware spreading via fake TVTap app
Group-IB researchers identified a new Android malware-as-a-service platform called RemControl, active since May and first sampled in July, that uses over 30 phishing overlays to steal banking credentials. The malware spreads via malvertising campaigns impersonating the TVTap IPTV app, using fake Google Play pages and Meta Pixel tracking, and targets users in Italy, France, Spain, Poland, Portugal, Canada, and parts of the Middle East.