Regional Threat Insights Report- Benelux

Top Threats in the Region

Ermac, Anubis, and ToxicPanda dominate the mobile malware landscape, with campaigns linked to phishing lures, malicious APKs, and evolving delivery methods. Notably, the Octo2 Android banking trojan is gaining traction across Benelux and mainland Europe, leveraging advanced obfuscation techniques and Device Takeover (DTO) capabilities.

Emerging Risk: NFC Relay Fraud

Alongside traditional phishing threats such as SMS phishing (smishing) and fake banking portals, a rise in NFC relay fraud is exposing new vulnerabilities in mobile payments. These attacks allow criminals to bypass security layers and perform contactless payment fraud without physical access to the victim’s device.

Key Insights:

• 📈 Ermac and Anubis remain the most prevalent malware families

• 📡 Increased use of smishing, fake portals, and malware droppers

• 💳 Surge in NFC relay fraud targeting mobile-first banking environments

• 🔐 Threat actors exploiting 2FA codes, keystrokes, and screen data

• 🌍 Octo2 activity expands from Benelux to broader European targets

Fill out the form to get your copy of the report and stay informed about the latest developments in mobile security.