https://www.threatfabric.com/blogs/hook-a-new-ermac-fork-with-rat-capabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/images/stats-1.pngstats1stats1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/advertisement.pngadvertisementadvertisementhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/targets.pngtargetstargetshttps://www.threatfabric.com/hubfs/Threatfabric/images/target_areas.pngtargetareastargetareashttps://www.threatfabric.com/hubfs/Threatfabric/images/capabilities.pngcapabilitiescapabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/images/scratch.pngscratchscratchhttps://www.threatfabric.com/hubfs/Threatfabric/images/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/rat.pngratrathttps://www.threatfabric.com/hubfs/Threatfabric/images/forks.pngforksforks2023-06-16https://www.threatfabric.com/blogs/the-malware-gap-why-fraud-security-controls-still-miss-mobile-malwarehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Screenshot%202026-04-02%20at%2011.28.37.pngScreenshot20260402at112837Screenshot20260402at112837https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_MalwareGap4.jpgTFMalwareGap4TFMalwareGap4https://www.threatfabric.com/hubfs/Screenshot%202026-04-02%20at%2011.29.29.pngScreenshot20260402at112929Screenshot20260402at112929https://www.threatfabric.com/hubfs/TF_MalwareGap5.jpgTFMalwareGap5TFMalwareGap52026-04-02https://www.threatfabric.com/blogs/app-fraud-reimbursement-in-the-ukhttps://www.threatfabric.com/hubfs/Best%20message%20to%20victims.pngBestmessagetovictimsBestmessagetovictimshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Victims%20still%20get%20paid.pngVictimsstillgetpaidVictimsstillgetpaidhttps://www.threatfabric.com/hubfs/APP%20Fraud%20Reimbursement%20in%20the%20UK.pngAPPFraudReimbursementintheUKAPPFraudReimbursementintheUKhttps://www.threatfabric.com/hubfs/Why%20woud%20fraudster%20not%20return%20for%20round%20two.pngWhywoudfraudsternotreturnforroundtwoWhywoudfraudsternotreturnforroundtwo2023-09-12https://www.threatfabric.com/jobs/frontend-developer-vuejshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-18https://www.threatfabric.com/blogs/octo2-european-banks-already-under-attack-by-new-malware-varianthttps://www.threatfabric.com/hubfs/TF_Octo2.jpgTFOcto2TFOcto2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide4-Sep-20-2024-10-23-20-9512-AM.pngSlide4Sep2020241023209512AMSlide4Sep2020241023209512AMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/octo_zombinder.pngoctozombinderoctozombinderhttps://www.threatfabric.com/hubfs/Slide1-Sep-20-2024-10-16-01-2033-AM.pngSlide1Sep2020241016012033AMSlide1Sep2020241016012033AM2024-09-24https://www.threatfabric.com/resources/mobile-banking-trojans-abuse-android-binaryxml-format-to-avoid-detectionhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-08-24https://www.threatfabric.com/blogs/new-android-malware-herodotus-mimics-human-behaviour-to-evade-detectionhttps://www.threatfabric.com/hubfs/announcement.pngannouncementannouncementhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/capabilities-1.pngcapabilities1capabilities1https://www.threatfabric.com/hubfs/panel-1.pngpanel1panel1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/brkwl_herodotus.pngbrkwlherodotusbrkwlherodotushttps://www.threatfabric.com/hubfs/overlay.pngoverlayoverlayhttps://www.threatfabric.com/hubfs/MTI_Blog_Herodotus2.jpgMTIBlogHerodotus2MTIBlogHerodotus2https://www.threatfabric.com/hubfs/randomizing_delays.pngrandomizingdelaysrandomizingdelayshttps://www.threatfabric.com/hubfs/overlay_code.pngoverlaycodeoverlaycodehttps://www.threatfabric.com/hubfs/dropper.pngdropperdropperhttps://www.threatfabric.com/hubfs/brkwl_brokewell.pngbrkwlbrokewellbrkwlbrokewellhttps://www.threatfabric.com/hubfs/panel_delay.pngpaneldelaypaneldelayhttps://www.threatfabric.com/hubfs/omitted_features.pngomittedfeaturesomittedfeatures2025-10-28https://www.threatfabric.com/blogs/fusion-fireside-3-cyber-defence-community-and-collaboration-with-craig-ricehttps://www.threatfabric.com/hubfs/TF_FusionFireside_CraigRice.pngTFFusionFiresideCraigRiceTFFusionFiresideCraigRicehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2024-10-31https://www.threatfabric.com/webinarshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/hacker.pnghackerhackerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-06-12https://www.threatfabric.com/blogs/threatfabric-secures-strategic-investment-from-onespan-to-accelerate-global-fraud-and-scam-preventionhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_PressRelease_Onespan2.jpgTFPressReleaseOnespan2TFPressReleaseOnespan2https://www.threatfabric.com/hubfs/40185.png40185401852025-10-06https://www.threatfabric.com/blogs/mysterybot__a_new_android_banking_trojan_ready_for_android_7_and_8https://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/MysteryL0cker_dashboard.webpMysteryL0ckerdashboardMysteryL0ckerdashboardhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/koodous_mystery_loki_c2_link.webpkoodousmysterylokic2linkkoodousmysterylokic2linkhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/foreground_apps_list.pngforegroundappslistforegroundappslisthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/usagestats_permission.webpusagestatspermissionusagestatspermissionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/botcommands.webpbotcommandsbotcommandshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/logo.webplogologohttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/behavioral-analytics-scamshttps://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.07.24.pngScreenshot20250313at110724Screenshot20250313at110724https://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.06.20.pngScreenshot20250313at110620Screenshot20250313at110620https://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.05.08.pngScreenshot20250313at110508Screenshot20250313at110508https://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.05.42.pngScreenshot20250313at110542Screenshot20250313at110542https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.09.12.pngScreenshot20250313at110912Screenshot20250313at110912https://www.threatfabric.com/hubfs/Lightning%20Campaign%207.1%20-%20Behavioral%20Analytics_Scams.jpgLightningCampaign71BehavioralAnalyticsScamsLightningCampaign71BehavioralAnalyticsScamshttps://www.threatfabric.com/hubfs/40185.png40185401852025-04-08https://www.threatfabric.com/blogs/anatsa-hits-uk-and-dach-with-new-campaignhttps://www.threatfabric.com/hubfs/anatsa_capabilities.jpeganatsacapabilitiesanatsacapabilitieshttps://www.threatfabric.com/hubfs/dropper.jpegdropperdropperhttps://www.threatfabric.com/hubfs/killchain.jpegkillchainkillchainhttps://www.threatfabric.com/hubfs/targeted_countries.jpegtargetedcountriestargetedcountrieshttps://www.threatfabric.com/hubfs/cover-3.pngcover3cover3https://www.threatfabric.com/hubfs/anatsa_samples.jpeganatsasamplesanatsasampleshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/targets_us.jpgtargetsustargetsushttps://www.threatfabric.com/hubfs/timeline.jpgtimelinetimelinehttps://www.threatfabric.com/hubfs/40185.png40185401852023-06-26https://www.threatfabric.com/blogs/authentication-in-the-age-of-spoofed-biometricshttps://www.threatfabric.com/hubfs/TF_HologramLaptop_16-9%20(1).pngTFHologramLaptop1691TFHologramLaptop1691https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/image-png-Mar-21-2024-01-12-23-9751-PM.pngimagepngMar2120240112239751PMimagepngMar2120240112239751PMhttps://www.threatfabric.com/hubfs/40185.png40185401852024-03-21https://www.threatfabric.com/blogs/massiv-when-your-iptv-app-terminates-your-savingshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Slide2-Feb-18-2026-10-26-57-0045-AM.pngSlide2Feb1820261026570045AMSlide2Feb1820261026570045AMhttps://www.threatfabric.com/hubfs/Slide1-Feb-18-2026-10-26-56-8271-AM.pngSlide1Feb1820261026568271AMSlide1Feb1820261026568271AMhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide3-Feb-18-2026-10-26-57-0185-AM.pngSlide3Feb1820261026570185AMSlide3Feb1820261026570185AMhttps://www.threatfabric.com/hubfs/code.pngcodecodehttps://www.threatfabric.com/hubfs/TF_IPTV4.jpgTFIPTV4TFIPTV4https://www.threatfabric.com/hubfs/Slide4-Feb-18-2026-10-26-56-9225-AM.pngSlide4Feb1820261026569225AMSlide4Feb1820261026569225AM2026-02-19https://www.threatfabric.com/beating-rats-with-frs-device-riskhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/BelgiumBubble.jpgBelgiumBubbleBelgiumBubblehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202024-12-10%20at%2015.27.42.pngScreenshot20241210at152742Screenshot20241210at152742https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/synergy.pngsynergysynergy2026-03-16https://www.threatfabric.com/blogs/threatfabric-uncovers-cyber-espionage-linked-to-state-backed-group-misusing-mobile-payment-systemshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard.pngThreatFabricSocialCardThreatFabricSocialCard2023-10-02https://www.threatfabric.com/newshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/hacker.pnghackerhacker2024-06-17https://www.threatfabric.com/resources/voice-phishing-using-rathttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/investment-scams-vs-fraud-kill-chainhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.51.20.pngScreenshot20240304at085120Screenshot20240304at085120https://www.threatfabric.com/hubfs/TF_InvestmentScams.jpgTFInvestmentScamsTFInvestmentScamshttps://www.threatfabric.com/hubfs/InvestmentFraud_Details@2x.pngInvestmentFraudDetails2xInvestmentFraudDetails2xhttps://www.threatfabric.com/hubfs/InvestmentFraud_FeaturedImage@2x-1.pngInvestmentFraudFeaturedImage2x1InvestmentFraudFeaturedImage2x1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.04.pngScreenshot20240304at085204Screenshot20240304at0852042024-04-24https://www.threatfabric.com/blogs/threatfabric-recognised-by-gartner-as-a-sample-vendor-for-emerging-tech-impact-radar-securityhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_Gartner_January2024.pngTFGartnerJanuary2024TFGartnerJanuary2024https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2024-01-15https://www.threatfabric.com/blogs/threatfabric-appoints-andrew-hawthorne-as-vp-of-global-saleshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(38).pngMicrosoftTeamsimage38MicrosoftTeamsimage382023-09-18https://www.threatfabric.com/blogs/ermac-another-cerberus-rebornhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/context.webpcontextcontexthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/ermac.webpermacermachttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/campaigns.webpcampaignscampaignshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/traffic.webptraffictraffichttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/amplebot.webpamplebotamplebot2023-03-03https://www.threatfabric.com/blogs/cerberus-a-new-banking-trojan-from-the-underworldhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/twitter.pngtwittertwitterhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/evolution.pngevolutionevolutionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/accesibility.pngaccesibilityaccesibilityhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/cover-cerberus.pngcovercerberuscovercerberushttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/overlay3.pngoverlay3overlay3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/overlay1.pngoverlay1overlay1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/overlay2.pngoverlay2overlay2https://www.threatfabric.com/hubfs/40185.png40185401852023-03-03https://www.threatfabric.com/blogs/fusion-fireside-9-from-telecom-to-threat-intel-reflections-on-nordic-cyber-resilience-with-morten-tandlehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_MortenTandle.jpgTFFusionFiresideMortenTandleTFFusionFiresideMortenTandle2025-03-27https://www.threatfabric.com/blogs/vultur-v-for-vnchttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/settings-panel.webpsettingspanelsettingspanelhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/a11y.webpa11ya11yhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-old-vs-new.webpbrunhildaoldvsnewbrunhildaoldvsnewhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/vultur-flow-diagram.webpvulturflowdiagramvulturflowdiagramhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/playstore.webpplaystoreplaystorehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-vs-vultur.webpbrunhildavsvulturbrunhildavsvulturhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/intro.webpintrointrohttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/registration.pngregistrationregistrationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-sample-mti.pngbrunhildasamplemtibrunhildasamplemtihttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/targets-graph.pngtargetsgraphtargetsgraph2023-06-16https://www.threatfabric.com/blogs/ginp_a_malware_patchwork_borrowing_from_anubishttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/startwhilerequest.webpstartwhilerequeststartwhilerequesthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/overlays4.webpoverlays4overlays4https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/overlays2.webpoverlays2overlays2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/accesibility.pngaccesibilityaccesibilityhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/overlays3.webpoverlays3overlays3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/receivers.pngreceiversreceivershttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/generic-grabber.webpgenericgrabbergenericgrabberhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/overlays1.webpoverlays1overlays1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/santander-overlays.webpsantanderoverlayssantanderoverlays2023-05-23https://www.threatfabric.com/blogs/threatfabric-appoints-emma-galvani-as-head-of-marketinghttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_Team_Emma.jpgTFTeamEmmaTFTeamEmma2023-09-13https://www.threatfabric.com/blogs/toad-fraudhttps://www.threatfabric.com/hubfs/Threatfabric/images/toad.pngtoadtoadhttps://www.threatfabric.com/hubfs/Threatfabric/images/smsspy.pngsmsspysmsspyhttps://www.threatfabric.com/hubfs/Threatfabric/images/panel-1.pngpanel1panel1https://www.threatfabric.com/hubfs/Threatfabric/images/copybara_overlay.pngcopybaraoverlaycopybaraoverlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/cover-1.jpgcover1cover1https://www.threatfabric.com/hubfs/Threatfabric/images/copybara_form.pngcopybaraformcopybaraformhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/phishing.pngphishingphishinghttps://www.threatfabric.com/hubfs/Threatfabric/images/copybara.pngcopybaracopybarahttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-06-16https://www.threatfabric.com/blogs/fusion-fireside-8-banking-security-and-nordic-collaboration-with-h%C3%A1kon-akerlundhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_HakonAkerlund.jpgTFFusionFiresideHakonAkerlundTFFusionFiresideHakonAkerlund2025-02-25https://www.threatfabric.com/resources/account-takeover-ato-fraudhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/malware-successfully-exploiting-bnpl-appshttps://www.threatfabric.com/hubfs/Threatfabric/images/screenshot-2022-09-07-at-22.01.07.pngscreenshot20220907at220107screenshot20220907at220107https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/tf_core_story_2022_chs_v1.6.025.jpegtfcorestory2022chsv16025tfcorestory2022chsv160252023-03-03https://www.threatfabric.com/blogs/vultur-con-v-de-vnchttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/settings-panel.webpsettingspanelsettingspanelhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-old-vs-new.webpbrunhildaoldvsnewbrunhildaoldvsnewhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/playstore.webpplaystoreplaystorehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/a11y.webpa11ya11yhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/targets-graph.pngtargetsgraphtargetsgraphhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/registration.pngregistrationregistrationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-vs-vultur.webpbrunhildavsvulturbrunhildavsvulturhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/vultur-flow-diagram.webpvulturflowdiagramvulturflowdiagramhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/intro.webpintrointro2023-06-16https://www.threatfabric.com/blogs/brata-a-tale-of-three-familieshttps://www.threatfabric.com/hubfs/Threatfabric/images/b4a.pngb4ab4ahttps://www.threatfabric.com/hubfs/Threatfabric/images/copybara-1.pngcopybara1copybara1https://www.threatfabric.com/hubfs/Threatfabric/images/tale.pngtaletalehttps://www.threatfabric.com/hubfs/Threatfabric/images/voice.pngvoicevoicehttps://www.threatfabric.com/hubfs/Threatfabric/images/screenshot.pngscreenshotscreenshothttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/amex_rental.pngamexrentalamexrentalhttps://www.threatfabric.com/hubfs/Threatfabric/images/brata.pngbratabratahttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/cover-2.jpgcover2cover2https://www.threatfabric.com/hubfs/Threatfabric/images/amextroll.pngamextrollamextrollhttps://www.threatfabric.com/hubfs/Threatfabric/images/amex_targets.pngamextargetsamextargetshttps://www.threatfabric.com/hubfs/Threatfabric/images/copybara_overlay-1.pngcopybaraoverlay1copybaraoverlay12023-06-27https://www.threatfabric.com/blogs/letscall-new-sophisticated-vishing-toolsethttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/letscall-screen3.pngletscallscreen3letscallscreen3https://www.threatfabric.com/hubfs/letscall-screen5-1.pngletscallscreen51letscallscreen51https://www.threatfabric.com/hubfs/letscall-screen1.pngletscallscreen1letscallscreen1https://www.threatfabric.com/hubfs/Screenshot%202023-06-28%20at%2010.42.08.pngScreenshot20230628at104208Screenshot20230628at104208https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2010.57.48.pngScreenshot20230615at105748Screenshot20230615at105748https://www.threatfabric.com/hubfs/Screenshot%202023-06-08%20at%2017.49.54%20cut.pngScreenshot20230608at174954cutScreenshot20230608at174954cuthttps://www.threatfabric.com/hubfs/TF_Blog_Letscall.jpgTFBlogLetscallTFBlogLetscallhttps://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2012.30.18.pngScreenshot20230615at123018Screenshot20230615at123018https://www.threatfabric.com/hubfs/Screenshot%202023-06-16%20at%2016.45.07.pngScreenshot20230616at164507Screenshot20230616at164507https://www.threatfabric.com/hubfs/Screenshot%202023-06-14%20at%2016.28.35.pngScreenshot20230614at162835Screenshot20230614at162835https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2014.26.06.pngScreenshot20230615at142606Screenshot20230615at142606https://www.threatfabric.com/hubfs/admin_menu.pngadminmenuadminmenuhttps://www.threatfabric.com/hubfs/Screenshot%202023-06-14%20at%2017.35.25.pngScreenshot20230614at173525Screenshot20230614at173525https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2013.49.42-1.pngScreenshot20230615at1349421Screenshot20230615at1349421https://www.threatfabric.com/hubfs/letscall-screen6.pngletscallscreen6letscallscreen6https://www.threatfabric.com/hubfs/video_demo1.gifvideodemo1videodemo1https://www.threatfabric.com/hubfs/Screenshot%202023-06-20%20at%2012.54.07.pngScreenshot20230620at125407Screenshot20230620at125407https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2012.05.00.pngScreenshot20230615at120500Screenshot20230615at120500https://www.threatfabric.com/hubfs/Screenshot%202023-06-14%20at%2017.27.59.pngScreenshot20230614at172759Screenshot20230614at172759https://www.threatfabric.com/hubfs/letscall-screen4.pngletscallscreen4letscallscreen4https://www.threatfabric.com/hubfs/Screenshot%202023-06-14%20at%2016.35.38.pngScreenshot20230614at163538Screenshot20230614at163538https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2011.27.32.pngScreenshot20230615at112732Screenshot20230615at112732https://www.threatfabric.com/hubfs/Screenshot%202023-06-28%20at%2010.33.44.pngScreenshot20230628at103344Screenshot20230628at103344https://www.threatfabric.com/hubfs/letscall-screen2.pngletscallscreen2letscallscreen22023-07-07https://www.threatfabric.com/blogs/chameleon-is-now-targeting-employees-masquerading-as-crm-apphttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Slide3-Jul-29-2024-03-10-47-9967-PM.pngSlide3Jul2920240310479967PMSlide3Jul2920240310479967PMhttps://www.threatfabric.com/hubfs/Slide1-Jul-29-2024-03-09-02-8496-PM.pngSlide1Jul2920240309028496PMSlide1Jul2920240309028496PMhttps://www.threatfabric.com/hubfs/TF_Chameleon_2024.jpgTFChameleon2024TFChameleon2024https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide2-Jul-29-2024-03-10-32-6973-PM.pngSlide2Jul2920240310326973PMSlide2Jul2920240310326973PM2024-08-15https://www.threatfabric.com/frshttps://www.threatfabric.com/hubfs/Screenshot%202024-12-10%20at%2015.27.42.pngScreenshot20241210at152742Screenshot20241210at152742https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bc-1.jpgharrytfmiyazakistyleimageofjellyfishplayingtugofwarw00f220c19dd844e89367e3e18b0485bc1harrytfmiyazakistyleimageofjellyfishplayingtugofwarw00f220c19dd844e89367e3e18b0485bc1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/synergy.pngsynergysynergyhttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard12026-03-16https://www.threatfabric.com/blogs/device-intelligence-adapting-beyond-fingerprintinghttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/ATO%20-%20vishing.jpgATOvishingATOvishinghttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_HyenaHologram.jpgTFHyenaHologramTFHyenaHologram2024-11-14https://www.threatfabric.com/blogs/sturnus-banking-trojan-bypassing-whatsapp-telegram-and-signalhttps://www.threatfabric.com/hubfs/MessagingApps.pngMessagingAppsMessagingAppshttps://www.threatfabric.com/hubfs/treemode.pngtreemodetreemodehttps://www.threatfabric.com/hubfs/Block_bank_overlays.pngBlockbankoverlaysBlockbankoverlayshttps://www.threatfabric.com/hubfs/image-png-Nov-18-2025-12-47-39-4206-PM.pngimagepngNov1820251247394206PMimagepngNov1820251247394206PMhttps://www.threatfabric.com/hubfs/communication.pngcommunicationcommunicationhttps://www.threatfabric.com/hubfs/vnc.pngvncvnchttps://www.threatfabric.com/hubfs/env.pngenvenvhttps://www.threatfabric.com/hubfs/MTI_Blog_Sturnus3.jpgMTIBlogSturnus3MTIBlogSturnus3https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202025-11-18%20at%2012.30.15.pngScreenshot20251118at123015Screenshot20251118at123015https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Sturnus.pngSturnusSturnus2025-11-20https://www.threatfabric.com/blogs/blackrock_the_trojan_that_wanted_to_get_them_allhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/accessibility.pngaccessibilityaccessibilityhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/lokibot_malware_family.pnglokibotmalwarefamilylokibotmalwarefamilyhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/cc_targets_per_category.pngcctargetspercategorycctargetspercategoryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/overlay.pngoverlayoverlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/cc_overlay.pngccoverlayccoverlayhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/top15_targeted_countries.pngtop15targetedcountriestop15targetedcountrieshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/credentials_targets_per_category.pngcredentialstargetspercategorycredentialstargetspercategoryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/40185.png40185401852023-06-16https://www.threatfabric.com/jobs/back-end-java-engineerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852024-09-09https://www.threatfabric.com/blogs/inform-and-threatfabric-announce-collaboration-endorsed-by-rabobankhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Inform_PartnershipAnnouncement_SOCIAL.jpgInformPartnershipAnnouncementSOCIALInformPartnershipAnnouncementSOCIALhttps://www.threatfabric.com/hubfs/40185.png40185401852025-09-02https://www.threatfabric.com/blogs/bugdrop-new-dropper-bypassing-google-security-measureshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bugDrop/poc.pngpocpochttps://www.threatfabric.com/hubfs/Threatfabric/images/error.pngerrorerrorhttps://www.threatfabric.com/hubfs/Threatfabric/images/cover%20(1)-1.pngcover11cover11https://www.threatfabric.com/hubfs/Threatfabric/images/panel-2.pngpanel2panel2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/group.pnggroupgrouphttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/config.pngconfigconfighttps://www.threatfabric.com/hubfs/Threatfabric/images/overlay.pngoverlayoverlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/brox.pngbroxbroxhttps://www.threatfabric.com/hubfs/Threatfabric/images/pakistan.pngpakistanpakistan2023-06-16https://www.threatfabric.com/blogs/fusion-fireside-6-navigating-fraud-trends-with-freddy-arthur-from-nice-actimizehttps://www.threatfabric.com/hubfs/TF_FusionFireside_FreddyArthur.pngTFFusionFiresideFreddyArthurTFFusionFiresideFreddyArthurhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2024-12-12https://www.threatfabric.com/blogs/epic-versus-google-what-about-mobile-malwarehttps://www.threatfabric.com/hubfs/TF_GoogleStreet.jpgTFGoogleStreetTFGoogleStreethttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/anatsa_droppers_timeline.pnganatsadropperstimelineanatsadropperstimelinehttps://www.threatfabric.com/hubfs/40185.png40185401852024-10-21https://www.threatfabric.com/blogs/sova-new-trojan-with-fowl-intentionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/wallets.webpwalletswalletshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/targets.webptargetstargetshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/graph.webpgraphgraphhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/schema.webpschemaschemahttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/context.webpcontextcontexthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/3stage.webp3stage3stage2023-06-27https://www.threatfabric.com/blogs/brokewell-do-not-go-broke-by-new-banking-malwarehttps://www.threatfabric.com/hubfs/Slide4-Apr-17-2024-10-25-40-7838-PM.pngSlide4Apr1720241025407838PMSlide4Apr1720241025407838PMhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide5-Apr-17-2024-10-25-40-6369-PM.pngSlide5Apr1720241025406369PMSlide5Apr1720241025406369PMhttps://www.threatfabric.com/hubfs/Slide3-Apr-17-2024-10-25-41-3370-PM.pngSlide3Apr1720241025413370PMSlide3Apr1720241025413370PMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Slide1-Apr-17-2024-10-25-40-6370-PM.pngSlide1Apr1720241025406370PMSlide1Apr1720241025406370PMhttps://www.threatfabric.com/hubfs/Slide2-4.pngSlide24Slide24https://www.threatfabric.com/hubfs/harry_tf_money_coins_in_well_miyazaki_style_drawing_of_water_we_0237f000-5c27-4a04-bb8c-864f66d32459.jpgharrytfmoneycoinsinwellmiyazakistyledrawingofwaterwe0237f0005c274a04bb8c864f66d32459harrytfmoneycoinsinwellmiyazakistyledrawingofwaterwe0237f0005c274a04bb8c864f66d324592024-04-25https://www.threatfabric.com/blogs/threatfabric-appoints-andy-chandler-as-chief-commercial-officerhttps://www.threatfabric.com/hubfs/Andy%20Chandler.pngAndyChandlerAndyChandlerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-06-06https://www.threatfabric.com/blogs/smishing-campaign-in-nl-spreading-cabassous-and-anatsahttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/smishing/tweet.pngtweettweethttps://www.threatfabric.com/hubfs/Threatfabric/images/overlay_2.pngoverlay2overlay2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/smishing/ups_fake_page_uk.pngupsfakepageukupsfakepageukhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/smishing/ups_fake_page_nl.pngupsfakepagenlupsfakepagenlhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/smishing/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/overlay_1.pngoverlay1overlay1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-06-27https://www.threatfabric.com/blogs/anatsa-targets-north-america-uses-proven-mobile-campaign-processhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/undefined-3.pngundefined3undefined3https://www.threatfabric.com/hubfs/TF_Anatsa_BlogUSA.jpgTFAnatsaBlogUSATFAnatsaBlogUSAhttps://www.threatfabric.com/hubfs/40185.png40185401852025-07-08https://www.threatfabric.com/blogs/fusion-fireside-10-fusion-in-practice-with-senan-moloneyhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_SenanMoloney.jpgTFFusionFiresideSenanMoloneyTFFusionFiresideSenanMoloney2025-05-15https://www.threatfabric.com/blogs/fusion-fireside-13-insights-from-the-frontlines-of-security-with-keith-gordonhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGordon.jpgTFFusionFiresideKeithGordonTFFusionFiresideKeithGordonhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-10-21https://www.threatfabric.com/blogs/threatfabric-has-extended-its-fraud-risk-suite-with-advanced-behavioural-analyticshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/tf_blog_ba.jpgtfblogbatfblogbahttps://www.threatfabric.com/hubfs/Threatfabric/images/TF_CORE_STORY_2022_CHS_v1.3.024.jpegTFCORESTORY2022CHSv13024TFCORESTORY2022CHSv13024https://www.threatfabric.com/hubfs/Threatfabric/images/TF_CORE_STORY_2022_CHS_v1.3.023.jpegTFCORESTORY2022CHSv13023TFCORESTORY2022CHSv13023https://www.threatfabric.com/hubfs/Threatfabric/images/ca_ba_threatfabric.pngcabathreatfabriccabathreatfabrichttps://www.threatfabric.com/hubfs/Threatfabric/images/TF_CORE_STORY_2022_CHS_v1.3.025.jpegTFCORESTORY2022CHSv13025TFCORESTORY2022CHSv130252023-03-03https://www.threatfabric.com/resources/unlock-insights-the-anatsa-banking-trojan-campaign-reporthttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard.pngThreatFabricSocialCardThreatFabricSocialCardhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852024-02-05https://www.threatfabric.com/blogs/fusion-fireside-15-exploring-psd3-and-psr-with-frederik-menneshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_FrederikMennes.jpgTFFusionFiresideFrederikMennesTFFusionFiresideFrederikMennes2026-01-15https://www.threatfabric.com/blogs/anubis_2_malware_and_afterlifehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/targets_per_region.pngtargetsperregiontargetsperregionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/target_types.webptargettypestargettypeshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/targets_per_country.pngtargetspercountrytargetspercountryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/bankbot.jpgbankbotbankbothttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/targets_per_subregion.pngtargetspersubregiontargetspersubregionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/anubis.webpanubisanubishttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/bank_bot_tree.webpbankbottreebankbottree2023-05-23https://www.threatfabric.com/blogs/phantomcard-new-nfc-driven-android-malware-emerging-in-brazilhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide5-Aug-11-2025-04-27-58-8937-PM.pngSlide5Aug1120250427588937PMSlide5Aug1120250427588937PMhttps://www.threatfabric.com/hubfs/Slide3-Aug-11-2025-04-27-58-9509-PM.pngSlide3Aug1120250427589509PMSlide3Aug1120250427589509PMhttps://www.threatfabric.com/hubfs/phantomcard-step-1.pngphantomcardstep1phantomcardstep1https://www.threatfabric.com/hubfs/Slide4-Aug-11-2025-04-27-58-3299-PM.pngSlide4Aug1120250427583299PMSlide4Aug1120250427583299PMhttps://www.threatfabric.com/hubfs/Slide1-Aug-11-2025-04-27-58-3965-PM.pngSlide1Aug1120250427583965PMSlide1Aug1120250427583965PMhttps://www.threatfabric.com/hubfs/phantomcard-step-2.pngphantomcardstep2phantomcardstep2https://www.threatfabric.com/hubfs/Slide2-Aug-11-2025-04-27-58-5192-PM.pngSlide2Aug1120250427585192PMSlide2Aug1120250427585192PMhttps://www.threatfabric.com/hubfs/phantomcard-code-1.pngphantomcardcode1phantomcardcode1https://www.threatfabric.com/hubfs/phantomcard-step-3.pngphantomcardstep3phantomcardstep3https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/phantomcard-code-2.pngphantomcardcode2phantomcardcode2https://www.threatfabric.com/hubfs/Slide6-Aug-12-2025-08-05-37-1219-AM.pngSlide6Aug1220250805371219AMSlide6Aug1220250805371219AMhttps://www.threatfabric.com/hubfs/TF_MTI_PhantomCard.jpgTFMTIPhantomCardTFMTIPhantomCardhttps://www.threatfabric.com/hubfs/phantomcard-step-4.pngphantomcardstep4phantomcardstep4https://www.threatfabric.com/hubfs/regions.pngregionsregions2025-08-14https://www.threatfabric.com/resources/fraud-risk-suitehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-08-24https://www.threatfabric.com/blogs/exobot_v2_update_staying_ahead_of_the_competitionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_web_injects_in_the_exobot_panel.webpexobotv2updatestayingaheadofthecompetitionwebinjectsintheexobotpanelexobotv2updatestayingaheadofthecompetitionwebinjectsintheexobotpanelhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_decrypted_http_traffic.pngexobotv2updatestayingaheadofthecompetitiondecryptedhttptrafficexobotv2updatestayingaheadofthecompetitiondecryptedhttptraffichttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_obfuscated_loader_code.webpexobotv2updatestayingaheadofthecompetitionobfuscatedloadercodeexobotv2updatestayingaheadofthecompetitionobfuscatedloadercodehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_socks_proxy_related_strings.pngexobotv2updatestayingaheadofthecompetitionsocksproxyrelatedstringsexobotv2updatestayingaheadofthecompetitionsocksproxyrelatedstringshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_encrypted_http_traffic.pngexobotv2updatestayingaheadofthecompetitionencryptedhttptrafficexobotv2updatestayingaheadofthecompetitionencryptedhttptraffichttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_main_module_functions.pngexobotv2updatestayingaheadofthecompetitionmainmodulefunctionsexobotv2updatestayingaheadofthecompetitionmainmodulefunctionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/csd_android_trojan_detection.pngcsdandroidtrojandetectioncsdandroidtrojandetection2023-06-16https://www.threatfabric.com/blogs/sophisticated-google-play-bankbot-trojan-campaignshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_bankbot_apps_that_have_been_uploaded_to_google_play.webpsophisticatedgoogleplaybankbottrojancampaignsbankbotappsthathavebeenuploadedtogoogleplaysophisticatedgoogleplaybankbottrojancampaignsbankbotappsthathavebeenuploadedtogoogleplayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_required_permissions.webpsophisticatedgoogleplaybankbottrojancampaignsrequiredpermissionssophisticatedgoogleplaybankbottrojancampaignsrequiredpermissionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_bankbot_trojan_flowchart.jpgsophisticatedgoogleplaybankbottrojancampaignsbankbottrojanflowchartsophisticatedgoogleplaybankbottrojancampaignsbankbottrojanflowcharthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_install_non_market_apps_1.pngsophisticatedgoogleplaybankbottrojancampaignsinstallnonmarketapps1sophisticatedgoogleplaybankbottrojancampaignsinstallnonmarketapps1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_bankbot_dropper_investigation_samples.webpsophisticatedgoogleplaybankbottrojancampaignsbankbotdropperinvestigationsamplessophisticatedgoogleplaybankbottrojancampaignsbankbotdropperinvestigationsampleshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_nagging_install_screen_2.pngsophisticatedgoogleplaybankbottrojancampaignsnagginginstallscreen2sophisticatedgoogleplaybankbottrojancampaignsnagginginstallscreen2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_nagging_install_screen_1.pngsophisticatedgoogleplaybankbottrojancampaignsnagginginstallscreen1sophisticatedgoogleplaybankbottrojancampaignsnagginginstallscreen1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_real_funny_videos.webpsophisticatedgoogleplaybankbottrojancampaignsrealfunnyvideossophisticatedgoogleplaybankbottrojancampaignsrealfunnyvideoshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_apks_with_network_host_185_153_198_52.pngsophisticatedgoogleplaybankbottrojancampaignsapkswithnetworkhost18515319852sophisticatedgoogleplaybankbottrojancampaignsapkswithnetworkhost18515319852https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_install_non_market_apps_2.pngsophisticatedgoogleplaybankbottrojancampaignsinstallnonmarketapps2sophisticatedgoogleplaybankbottrojancampaignsinstallnonmarketapps2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_botnet_statistics.pngsophisticatedgoogleplaybankbottrojancampaignsbotnetstatisticssophisticatedgoogleplaybankbottrojancampaignsbotnetstatisticshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_apks_with_network_host_77_72_82_120.webpsophisticatedgoogleplaybankbottrojancampaignsapkswithnetworkhost777282120sophisticatedgoogleplaybankbottrojancampaignsapkswithnetworkhost7772821202023-06-16https://www.threatfabric.com/blogs/behavioural-analytics-mobile-malware-will-they-get-alonghttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207%20-%20Behavioral%20Analytics_MobileMalware-1.jpgLightningCampaign7BehavioralAnalyticsMobileMalware1LightningCampaign7BehavioralAnalyticsMobileMalware1https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-05-13https://www.threatfabric.com/resources/voice-phishing-using-malwarehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/octo-new-odf-banking-trojanhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/dropper2.webpdropper2dropper2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/dropper1.webpdropper1dropper1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/campaign1.webpcampaign1campaign1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/panel.webppanelpanelhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/actor1.webpactor1actor1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/actor3.webpactor3actor3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/wrapper1.webpwrapper1wrapper1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/actor2.webpactor2actor2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/landing.webplandinglandinghttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/capabilities.webpcapabilitiescapabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/wrapper2.webpwrapper2wrapper2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/campaign2.webpcampaign2campaign2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/exobot_coper.webpexobotcoperexobotcoperhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/odf.webpodfodfhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-06-27https://www.threatfabric.com/blogs/lokibot_the_first_hybrid_android_malwarehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_bitcoin_wallet_details.pnglokibotthefirsthybridandroidmalwarebitcoinwalletdetailslokibotthefirsthybridandroidmalwarebitcoinwalletdetailshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_hardcoded_bitcoin_address_code_snippet.webplokibotthefirsthybridandroidmalwarehardcodedbitcoinaddresscodesnippetlokibotthefirsthybridandroidmalwarehardcodedbitcoinaddresscodesnippethttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_screen_shown_when_the_ransomware_locks_the_phone.webplokibotthefirsthybridandroidmalwarescreenshownwhentheransomwarelocksthephonelokibotthefirsthybridandroidmalwarescreenshownwhentheransomwarelocksthephonehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_automatic_ransomware_activation_when_disabling_device_admin_code_snippet.webplokibotthefirsthybridandroidmalwareautomaticransomwareactivationwhendisablingdeviceadmincodesnippetlokibotthefirsthybridandroidmalwareautomaticransomwareactivationwhendisablingdeviceadmincodesnippethttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_malware_command_and_control_panel.pnglokibotthefirsthybridandroidmalwaremalwarecommandandcontrolpanellokibotthefirsthybridandroidmalwaremalwarecommandandcontrolpanel2023-06-16https://www.threatfabric.com/jobs/senior-android-developerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2024-09-03https://www.threatfabric.com/blogs/fusion-fireside-17-inside-the-chinese-smishing-triad-with-gary-warnerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_GaryWarner.jpgTFFusionFiresideGaryWarnerTFFusionFiresideGaryWarnerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2026-03-18https://www.threatfabric.com/blogs/threatfabric-announces-partnership-with-silobreaker-to-strengthen-mobile-threat-intelligencehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/PR-Threat-fabric-1-1.jpgPRThreatfabric11PRThreatfabric112025-03-11https://www.threatfabric.com/blogs/fusion-fireside-1-navigating-the-payment-pathways-with-daniel-van-delfthttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_Announcement3.pngTFFusionFiresideAnnouncement3TFFusionFiresideAnnouncement3https://www.threatfabric.com/hubfs/40185.png40185401852024-10-31https://www.threatfabric.com/jobs/mobile-malware-analysthttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-18https://www.threatfabric.com/blogs/exobot_android_banking_trojan_on_the_risehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_bot_amount_by_country.pngexobotandroidbankingtrojanontherisebotamountbycountryexobotandroidbankingtrojanontherisebotamountbycountryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_overlays_for_phishing_google_play_facebook_and_ing_diba.pngexobotandroidbankingtrojanontheriseoverlaysforphishinggoogleplayfacebookandingdibaexobotandroidbankingtrojanontheriseoverlaysforphishinggoogleplayfacebookandingdibahttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_code_snippet_reset_password_or_lock_device.pngexobotandroidbankingtrojanontherisecodesnippetresetpasswordorlockdeviceexobotandroidbankingtrojanontherisecodesnippetresetpasswordorlockdevicehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_bot_amount_by_android_version.pngexobotandroidbankingtrojanontherisebotamountbyandroidversionexobotandroidbankingtrojanontherisebotamountbyandroidversionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_marcher_c2_admin_panel.pngexobotandroidbankingtrojanontherisemarcherc2adminpanelexobotandroidbankingtrojanontherisemarcherc2adminpanelhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_code_snippet_malware_forcing_device_back_to_home_screen.pngexobotandroidbankingtrojanontherisecodesnippetmalwareforcingdevicebacktohomescreenexobotandroidbankingtrojanontherisecodesnippetmalwareforcingdevicebacktohomescreenhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_runtastic_sample_permission_prompt.pngexobotandroidbankingtrojanontheriseruntasticsamplepermissionpromptexobotandroidbankingtrojanontheriseruntasticsamplepermissionprompthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_marcher_documentation_2.jpgexobotandroidbankingtrojanontherisemarcherdocumentation2exobotandroidbankingtrojanontherisemarcherdocumentation2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_overlay_for_postbank_finanzassistent.pngexobotandroidbankingtrojanontheriseoverlayforpostbankfinanzassistentexobotandroidbankingtrojanontheriseoverlayforpostbankfinanzassistenthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_device_admin_nagging_screen.pngexobotandroidbankingtrojanontherisedeviceadminnaggingscreenexobotandroidbankingtrojanontherisedeviceadminnaggingscreenhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_code_snippet_malware_intercepting_sms_mms_messages.pngexobotandroidbankingtrojanontherisecodesnippetmalwareinterceptingsmsmmsmessagesexobotandroidbankingtrojanontherisecodesnippetmalwareinterceptingsmsmmsmessageshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_marcher_mobile_banking_trojan.webpexobotandroidbankingtrojanontherisemarchermobilebankingtrojanexobotandroidbankingtrojanontherisemarchermobilebankingtrojanhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_marcher_documentation_1.jpgexobotandroidbankingtrojanontherisemarcherdocumentation1exobotandroidbankingtrojanontherisemarcherdocumentation1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/stop-fraudsters-at-the-front-door-with-device-behavioural-intelligencehttps://www.threatfabric.com/hubfs/TF_Blog_FrontDoor.jpgTFBlogFrontDoorTFBlogFrontDoorhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852025-09-23https://www.threatfabric.com/scam-prevention-in-turkey-with-behavioural-analyticshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/ScamCreature.jpgScamCreatureScamCreaturehttps://www.threatfabric.com/hubfs/synergy.pngsynergysynergyhttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Screenshot%202024-12-10%20at%2015.27.42.pngScreenshot20241210at152742Screenshot20241210at1527422026-03-16https://www.threatfabric.com/vulnerability-disclosure-policyhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-01-13https://www.threatfabric.com/blogs/bianlian_from_rags_to_riches_the_malware_dropper_that_had_a_dreamhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/bianlian_in_the_google_play.webpbianlianinthegoogleplaybianlianinthegoogleplayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/flow_diagram.pngflowdiagramflowdiagramhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/overlay_banks.pngoverlaybanksoverlaybankshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/card.webpcardcardhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/virustotal_detection_rate_1.webpvirustotaldetectionrate1virustotaldetectionrate1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/DroppersOverTime.pngDroppersOverTimeDroppersOverTimehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/virustotal_detection_rate_2.webpvirustotaldetectionrate2virustotaldetectionrate22023-05-23https://www.threatfabric.com/blogs/banking_malware_in_google_play_targeting_many_new_appshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/banking-malware/banking_malware_in_google_play_targeting_many_new_apps_additional_google_play_app_info.pngbankingmalwareingoogleplaytargetingmanynewappsadditionalgoogleplayappinfobankingmalwareingoogleplaytargetingmanynewappsadditionalgoogleplayappinfohttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/banking-malware/banking_malware_in_google_play_targeting_many_new_apps_funny_videos_2017_app_in_google_play.webpbankingmalwareingoogleplaytargetingmanynewappsfunnyvideos2017appingoogleplaybankingmalwareingoogleplaytargetingmanynewappsfunnyvideos2017appingoogleplayhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/banking-malware/banking_malware_in_google_play_targeting_many_new_apps_collection_of_overlays.webpbankingmalwareingoogleplaytargetingmanynewappscollectionofoverlaysbankingmalwareingoogleplaytargetingmanynewappscollectionofoverlays2023-05-23https://www.threatfabric.com/blogs/alien_the_story_of_cerberus_demisehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/cerberusc2.pngcerberusc2cerberusc2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/alienc2.pngalienc2alienc2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/targets.pngtargetstargetshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/forum4.pngforum4forum4https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/forum3.pngforum3forum3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/screenshot.webpscreenshotscreenshothttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/cerberus_samples.pngcerberussamplescerberussampleshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/forum1.pngforum1forum1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/forum2.pngforum2forum2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/tweet.webptweettweet2023-06-27https://www.threatfabric.com/contact2025-11-10https://www.threatfabric.com/resourceshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852025-06-12https://www.threatfabric.com/blogs/mobile-banking-malware-vs-fraud-kill-chainhttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_MobileBankingMalware.pngTFCyberfraudKillchainMobileBankingMalwareTFCyberfraudKillchainMobileBankingMalwarehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Screenshot%202024-02-26%20at%2015.43.58.pngScreenshot20240226at154358Screenshot20240226at154358https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_MobileBankingMalware_Details.pngTFCyberfraudKillchainMobileBankingMalwareDetailsTFCyberfraudKillchainMobileBankingMalwareDetailshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202024-02-26%20at%2015.43.42.pngScreenshot20240226at154342Screenshot20240226at1543422024-02-28https://www.threatfabric.com/blogs/double-trouble-in-latamhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/msi.pngmsimsihttps://www.threatfabric.com/hubfs/Threatfabric/images/infections.pnginfectionsinfectionshttps://www.threatfabric.com/hubfs/Threatfabric/images/stats.pngstatsstatshttps://www.threatfabric.com/hubfs/Threatfabric/images/screens.pngscreensscreenshttps://www.threatfabric.com/hubfs/Threatfabric/images/evolution.pngevolutionevolutionhttps://www.threatfabric.com/hubfs/Threatfabric/images/logs.pnglogslogshttps://www.threatfabric.com/hubfs/Threatfabric/images/ats.pngatsatshttps://www.threatfabric.com/hubfs/Threatfabric/images/panel.pngpanelpanelhttps://www.threatfabric.com/hubfs/Threatfabric/images/autoit.pngautoitautoithttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/transfer.pngtransfertransferhttps://www.threatfabric.com/hubfs/Threatfabric/images/brasdex-cover-minified.pngbrasdexcoverminifiedbrasdexcoverminifiedhttps://www.threatfabric.com/hubfs/Threatfabric/images/pix.pngpixpixhttps://www.threatfabric.com/hubfs/Threatfabric/images/email.pngemailemail2023-06-16https://www.threatfabric.comhttps://www.threatfabric.com/hubfs/TF_HeroImage1.jpgTFHeroImage1TFHeroImage1https://www.threatfabric.com/hubfs/TF_TechRequirements.jpgTFTechRequirementsTFTechRequirementshttps://www.threatfabric.com/hubfs/TF_FraudTrends2026_CLEAN2.jpgTFFraudTrends2026CLEAN2TFFraudTrends2026CLEAN2https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/MTI_Blog_Sturnus3.jpgMTIBlogSturnus3MTIBlogSturnus3https://www.threatfabric.com/hubfs/TF_FRS_Synergy-1.pngTFFRSSynergy1TFFRSSynergy1https://www.threatfabric.com/hubfs/Threatfabric/logos/gartner-logo-white.svggartnerlogowhitegartnerlogowhitehttps://www.threatfabric.com/hubfs/Threatfabric/logos/5stars.png5stars5starshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_Website_Flags.pngTFWebsiteFlagsTFWebsiteFlagshttps://www.threatfabric.com/hubfs/40185.png40185401852025-02-26https://www.threatfabric.com/blogs/romance-fraud-vs-fraud-kill-chainhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.51.20.pngScreenshot20240304at085120Screenshot20240304at085120https://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.32.pngScreenshot20240304at085232Screenshot20240304at085232https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_RomanceFraud_Details.pngTFCyberfraudKillchainRomanceFraudDetailsTFCyberfraudKillchainRomanceFraudDetailshttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.04.pngScreenshot20240304at085204Screenshot20240304at085204https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_RomanceFraud_FeaturedImage.pngTFCyberfraudKillchainRomanceFraudFeaturedImageTFCyberfraudKillchainRomanceFraudFeaturedImagehttps://www.threatfabric.com/hubfs/40185.png40185401852024-03-06https://www.threatfabric.com/resources/fraud-by-malwarehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-05-23https://www.threatfabric.com/blogs/threatfabric-recognized-by-gartner-as-cyber-fraud-fusion-kill-chain-vendorhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-09-15https://www.threatfabric.com/blogs/a-multi-layered-approach-to-detecting-impersonation-scamshttps://www.threatfabric.com/hubfs/TF_DetectingImpersonationScams.jpgTFDetectingImpersonationScamsTFDetectingImpersonationScamshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/20240924_Blog.jpg20240924Blog20240924Bloghttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2024-09-25https://www.threatfabric.com/blogs/fusion-fireside-2-threat-intelligence-collaboration-and-community-with-teresa-walshhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_TeresaWalsh.pngTFFusionFiresideTeresaWalshTFFusionFiresideTeresaWalsh2024-10-31https://www.threatfabric.com/blogs/crocodilus-mobile-malware-evolving-fast-going-globalhttps://www.threatfabric.com/hubfs/TF_LightningWebinars_Blog.jpgTFLightningWebinarsBlogTFLightningWebinarsBloghttps://www.threatfabric.com/hubfs/crypto-regex.pngcryptoregexcryptoregexhttps://www.threatfabric.com/hubfs/croco-goes-global.pngcrocogoesglobalcrocogoesglobalhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/facebook-ad-pl.pngfacebookadplfacebookadpl2025-06-03https://www.threatfabric.com/blogs/new_android_trojan_targeting_over_60_banks_and_social_appshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_forum_post_of_red_alert_actor_on_bot_update.webpnewandroidtrojantargetingover60banksandsocialappsforumpostofredalertactoronbotupdatenewandroidtrojantargetingover60banksandsocialappsforumpostofredalertactoronbotupdatehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_salt_code_snippet.pngnewandroidtrojantargetingover60banksandsocialappssaltcodesnippetnewandroidtrojantargetingover60banksandsocialappssaltcodesnippethttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_c2_server_address_code_snippet.webpnewandroidtrojantargetingover60banksandsocialappsc2serveraddresscodesnippetnewandroidtrojantargetingover60banksandsocialappsc2serveraddresscodesnippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_twitter_handle_code_snippet.webpnewandroidtrojantargetingover60banksandsocialappstwitterhandlecodesnippetnewandroidtrojantargetingover60banksandsocialappstwitterhandlecodesnippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_new_attack_vectors.webpnewandroidtrojantargetingover60banksandsocialappsnewattackvectorsnewandroidtrojantargetingover60banksandsocialappsnewattackvectorshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_red_alert_2.webpnewandroidtrojantargetingover60banksandsocialappsredalert2newandroidtrojantargetingover60banksandsocialappsredalert2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/codes.pngcodescodes2023-06-16https://www.threatfabric.com/blogs/xenomorph-v3-a-new-variant-with-ats-targeting-more-than-400-institutionshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/ad.pngadadhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/ats-condition.pngatsconditionatsconditionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/hadoken.pnghadokenhadokenhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/cookies.pngcookiescookieshttps://www.threatfabric.com/hubfs/cover-2.pngcover2cover2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/authenticator.pngauthenticatorauthenticatorhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/zombinder.pngzombinderzombinderhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/targets-02.pngtargets02targets02https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/cdn.pngcdncdn2023-06-27https://www.threatfabric.com/blogs/fusion-fireside-11-from-compliance-to-collaboration-with-keith-grosshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGross.jpgTFFusionFiresideKeithGrossTFFusionFiresideKeithGrosshttps://www.threatfabric.com/hubfs/40185.png40185401852025-06-17https://www.threatfabric.com/blogs/threatfabric-appoints-maurits-lucas-as-vp-of-sales-engineering-product-marketinghttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_Team_Maurits.pngTFTeamMauritsTFTeamMauritshttps://www.threatfabric.com/hubfs/40185.png40185401852023-10-11https://www.threatfabric.com/blogs/threatfabric-appoints-jacqueline-nijzink-as-chief-operating-officerhttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(74).pngMicrosoftTeamsimage74MicrosoftTeamsimage74https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-11-09https://www.threatfabric.com/jobshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/image%20(1).pngimage1image1https://www.threatfabric.com/hubfs/40185.png40185401852025-01-13https://www.threatfabric.com/mtihttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/TF_WebsiteAssets_MTI_Integrations.pngTFWebsiteAssetsMTIIntegrationsTFWebsiteAssetsMTIIntegrationshttps://www.threatfabric.com/hubfs/Screenshot%202025-01-09%20at%2011.55.05.pngScreenshot20250109at115505Screenshot20250109at115505https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/harry_tf_a_business_man_walking_through_a_tunnel_of_hope_in_a_c_9ee25930-a27b-4992-b321-1bae54c8bacc-topaz-standard%20v2-3840w.jpgharrytfabusinessmanwalkingthroughatunnelofhopeinac9ee25930a27b4992b3211bae54c8bacctopazstandardv23840wharrytfabusinessmanwalkingthroughatunnelofhopeinac9ee25930a27b4992b3211bae54c8bacctopazstandardv23840whttps://www.threatfabric.com/hubfs/MTI_Portal2.pngMTIPortal2MTIPortal2https://www.threatfabric.com/hubfs/MTI_Portal1.pngMTIPortal1MTIPortal12025-01-13https://www.threatfabric.com/blogs/fusion-fireside-special-psr-edition-with-our-guest-chris-bonehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_ChrisBone.jpgTFFusionFiresideChrisBoneTFFusionFiresideChrisBonehttps://www.threatfabric.com/hubfs/40185.png40185401852024-10-31https://www.threatfabric.com/blogs/pig-butchering-vs-cyber-fraud-kill-chainhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_PigButchering_FeaturedImage.jpgTFCyberfraudKillchainPigButcheringFeaturedImageTFCyberfraudKillchainPigButcheringFeaturedImagehttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_PigButchering_Details.jpgTFCyberfraudKillchainPigButcheringDetailsTFCyberfraudKillchainPigButcheringDetailshttps://www.threatfabric.com/hubfs/Screenshot%202024-06-11%20at%2015.14.32.pngScreenshot20240611at151432Screenshot20240611at151432https://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.04.pngScreenshot20240304at085204Screenshot20240304at085204https://www.threatfabric.com/hubfs/40185.png40185401852024-06-12https://www.threatfabric.com/blogs/threatfabric-investment-announcementhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/investment-announcement/investmentannoncement-detail.pnginvestmentannoncementdetailinvestmentannoncementdetailhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/investment-announcement/invesmentanouncement.pnginvesmentanouncementinvesmentanouncement2023-06-16https://www.threatfabric.com/blogs/ghost-tap-new-cash-out-tactic-with-nfc-relayhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_GhostTap_LOGO.jpgTFGhostTapLOGOTFGhostTapLOGOhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/image-png-Nov-12-2024-10-27-58-2276-AM.pngimagepngNov1220241027582276AMimagepngNov1220241027582276AMhttps://www.threatfabric.com/hubfs/MTI_NFC_relay_flow.pngMTINFCrelayflowMTINFCrelayflow2024-11-20https://www.threatfabric.com/blogs/2020_year_of_the_rathttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/hydra_overlays.pnghydraoverlayshydraoverlayshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/anubis_rat_post.pnganubisratpostanubisratposthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/Screenshot%202023-03-03%20at%2011.10.58%20AM.pngScreenshot20230303at111058AMScreenshot20230303at111058AMhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/australian_browser_overlay.pngaustralianbrowseroverlayaustralianbrowseroverlayhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/google_authenticator.jpggoogleauthenticatorgoogleauthenticator2023-05-23https://www.threatfabric.com/blogs/fusion-fireside-16-nearly-28-years-on-the-front-line-of-fraud-with-anton-jan-cozijnsenhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_AntonJanCozijnsen.jpgTFFusionFiresideAntonJanCozijnsenTFFusionFiresideAntonJanCozijnsenhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2026-02-18https://www.threatfabric.com/blogs/exposing-crocodilus-new-device-takeover-malware-targeting-android-deviceshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/device_tag.pngdevicetagdevicetaghttps://www.threatfabric.com/hubfs/crypto_message_cut.pngcryptomessagecutcryptomessagecuthttps://www.threatfabric.com/hubfs/debug_mesages.pngdebugmesagesdebugmesageshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_Blog_Crocodilus.jpgTFBlogCrocodilusTFBlogCrocodilushttps://www.threatfabric.com/hubfs/Slide2-2.jpegSlide22Slide22https://www.threatfabric.com/hubfs/Slide3-2.jpegSlide32Slide322025-03-31https://www.threatfabric.com/fusion-firesidehttps://www.threatfabric.com/hubfs/TF_FusionFireside_HakonAkerlund.jpgTFFusionFiresideHakonAkerlundTFFusionFiresideHakonAkerlundhttps://www.threatfabric.com/hubfs/TF_FusionFireside_MortenTandle.jpgTFFusionFiresideMortenTandleTFFusionFiresideMortenTandlehttps://www.threatfabric.com/hubfs/TF_FusionFireside_PatrickBours.jpgTFFusionFiresidePatrickBoursTFFusionFiresidePatrickBourshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_Eward_Faded.pngTFEwardFadedTFEwardFadedhttps://www.threatfabric.com/hubfs/TF_FusionFireside_FreddyArthur.pngTFFusionFiresideFreddyArthurTFFusionFiresideFreddyArthurhttps://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGross.jpgTFFusionFiresideKeithGrossTFFusionFiresideKeithGrosshttps://www.threatfabric.com/hubfs/TF_FusionFireside_FeaturedImage.jpgTFFusionFiresideFeaturedImageTFFusionFiresideFeaturedImagehttps://www.threatfabric.com/hubfs/TF_FusionFireside_SenanMoloney.jpgTFFusionFiresideSenanMoloneyTFFusionFiresideSenanMoloneyhttps://www.threatfabric.com/hubfs/TF_FusionFireside_ChrisBone.jpgTFFusionFiresideChrisBoneTFFusionFiresideChrisBonehttps://www.threatfabric.com/hubfs/TF_FusionFireside_JakeNorwood.jpgTFFusionFiresideJakeNorwoodTFFusionFiresideJakeNorwoodhttps://www.threatfabric.com/hubfs/TF_FusionFireside_TeresaWalsh.pngTFFusionFiresideTeresaWalshTFFusionFiresideTeresaWalshhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_CraigRice.pngTFFusionFiresideCraigRiceTFFusionFiresideCraigRicehttps://www.threatfabric.com/hubfs/TF_FusionFireside_DaveLaramy%201-1.jpgTFFusionFiresideDaveLaramy11TFFusionFiresideDaveLaramy11https://www.threatfabric.com/hubfs/TF_FusionFireside_Announcement3.pngTFFusionFiresideAnnouncement3TFFusionFiresideAnnouncement3https://www.threatfabric.com/hubfs/TF_FusionFireside_FrederikMennes.jpgTFFusionFiresideFrederikMennesTFFusionFiresideFrederikMenneshttps://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGordon.jpgTFFusionFiresideKeithGordonTFFusionFiresideKeithGordonhttps://www.threatfabric.com/hubfs/TF_FusionFireside_JohnFokker.jpgTFFusionFiresideJohnFokkerTFFusionFiresideJohnFokkerhttps://www.threatfabric.com/hubfs/TF_FusionFireside_AntonJanCozijnsen.jpgTFFusionFiresideAntonJanCozijnsenTFFusionFiresideAntonJanCozijnsen2026-02-19https://www.threatfabric.com/blogs/datzbro-rat-hiding-behind-senior-travel-scamshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/schematic_mode.pngschematicmodeschematicmodehttps://www.threatfabric.com/hubfs/Slide1-Sep-25-2025-09-21-45-6538-PM.pngSlide1Sep2520250921456538PMSlide1Sep2520250921456538PMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Slide4-Sep-25-2025-09-21-45-6182-PM.pngSlide4Sep2520250921456182PMSlide4Sep2520250921456182PMhttps://www.threatfabric.com/hubfs/scam_alert.pngscamalertscamalerthttps://www.threatfabric.com/hubfs/black_screen_density_semi.pngblackscreendensitysemiblackscreendensitysemihttps://www.threatfabric.com/hubfs/samples.pngsamplessampleshttps://www.threatfabric.com/hubfs/Slide2-Sep-25-2025-09-21-46-6322-PM.pngSlide2Sep2520250921466322PMSlide2Sep2520250921466322PMhttps://www.threatfabric.com/hubfs/panel_translated.pngpaneltranslatedpaneltranslatedhttps://www.threatfabric.com/hubfs/Slide3-Sep-25-2025-09-21-45-9714-PM.pngSlide3Sep2520250921459714PMSlide3Sep2520250921459714PMhttps://www.threatfabric.com/hubfs/panel.pngpanelpanelhttps://www.threatfabric.com/hubfs/TF_Datzbro.jpgTFDatzbroTFDatzbro2025-09-30https://www.threatfabric.com/blogshttps://www.threatfabric.com/hubfs/Threatfabric/images/cover%20(1)-1.pngcover11cover11https://www.threatfabric.com/hubfs/Andy%20Chandler.pngAndyChandlerAndyChandlerhttps://www.threatfabric.com/hubfs/TF_IPTV4.jpgTFIPTV4TFIPTV4https://www.threatfabric.com/hubfs/TF_FusionFireside_MortenTandle.jpgTFFusionFiresideMortenTandleTFFusionFiresideMortenTandlehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/InvestmentFraud_FeaturedImage@2x-1.pngInvestmentFraudFeaturedImage2x1InvestmentFraudFeaturedImage2x1https://www.threatfabric.com/hubfs/TF_Blog_FrontDoor.jpgTFBlogFrontDoorTFBlogFrontDoorhttps://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bc.jpgharrytfmiyazakistyleimageofjellyfishplayingtugofwarw00f220c19dd844e89367e3e18b0485bcharrytfmiyazakistyleimageofjellyfishplayingtugofwarw00f220c19dd844e89367e3e18b0485bchttps://www.threatfabric.com/hubfs/TF_GhostTap_LOGO.jpgTFGhostTapLOGOTFGhostTapLOGOhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/investment-announcement/invesmentanouncement.pnginvesmentanouncementinvesmentanouncementhttps://www.threatfabric.com/hubfs/TF_FusionFireside_FreddyArthur.pngTFFusionFiresideFreddyArthurTFFusionFiresideFreddyArthurhttps://www.threatfabric.com/hubfs/TF_Chameleon.jpgTFChameleonTFChameleonhttps://www.threatfabric.com/hubfs/TF_FusionFireside_DaveLaramy%201-1.jpgTFFusionFiresideDaveLaramy11TFFusionFiresideDaveLaramy11https://www.threatfabric.com/hubfs/TF_FusionFireside_FrederikMennes.jpgTFFusionFiresideFrederikMennesTFFusionFiresideFrederikMenneshttps://www.threatfabric.com/hubfs/Threatfabric/images/spyware.pngspywarespywarehttps://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGordon.jpgTFFusionFiresideKeithGordonTFFusionFiresideKeithGordonhttps://www.threatfabric.com/hubfs/MTI_Blog_Herodotus2.jpgMTIBlogHerodotus2MTIBlogHerodotus2https://www.threatfabric.com/hubfs/TF_KenPalla_ClarityOnAustralianScamRegulations_SOCIAL.jpgTFKenPallaClarityOnAustralianScamRegulationsSOCIALTFKenPallaClarityOnAustralianScamRegulationsSOCIALhttps://www.threatfabric.com/hubfs/TF_FusionFireside_SenanMoloney.jpgTFFusionFiresideSenanMoloneyTFFusionFiresideSenanMoloneyhttps://www.threatfabric.com/hubfs/TF_LightningWebinars_Blog.jpgTFLightningWebinarsBlogTFLightningWebinarsBloghttps://www.threatfabric.com/hubfs/PSR_Social1.jpgPSRSocial1PSRSocial1https://www.threatfabric.com/hubfs/20240924_Blog.jpg20240924Blog20240924Bloghttps://www.threatfabric.com/hubfs/cover-3.pngcover3cover3https://www.threatfabric.com/hubfs/TF_TechRequirements.jpgTFTechRequirementsTFTechRequirementshttps://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGross.jpgTFFusionFiresideKeithGrossTFFusionFiresideKeithGrosshttps://www.threatfabric.com/hubfs/TF_FusionFireside_JohnFokker.jpgTFFusionFiresideJohnFokkerTFFusionFiresideJohnFokkerhttps://www.threatfabric.com/hubfs/TF_Anatsa_Blog2.pngTFAnatsaBlog2TFAnatsaBlog2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/cover-2.jpgcover2cover2https://www.threatfabric.com/hubfs/TF_GoogleStreet.jpgTFGoogleStreetTFGoogleStreethttps://www.threatfabric.com/hubfs/TF_RaboInvestments_SOCIAL%201.pngTFRaboInvestmentsSOCIAL1TFRaboInvestmentsSOCIAL1https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(74).pngMicrosoftTeamsimage74MicrosoftTeamsimage74https://www.threatfabric.com/hubfs/TF_MTI_PhantomCard.jpgTFMTIPhantomCardTFMTIPhantomCardhttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207.2%20-%20Behavioral%20Analytics_Privacy.jpgLightningCampaign72BehavioralAnalyticsPrivacyLightningCampaign72BehavioralAnalyticsPrivacyhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/TF_Gartner_January2024.pngTFGartnerJanuary2024TFGartnerJanuary2024https://www.threatfabric.com/hubfs/MTI_Blog_Sturnus3.jpgMTIBlogSturnus3MTIBlogSturnus3https://www.threatfabric.com/hubfs/TF_FusionFireside_JakeNorwood.jpgTFFusionFiresideJakeNorwoodTFFusionFiresideJakeNorwoodhttps://www.threatfabric.com/hubfs/TF_FraudTrends2026_CLEAN2.jpgTFFraudTrends2026CLEAN2TFFraudTrends2026CLEAN2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/TF_Anatsa_BlogUSA.jpgTFAnatsaBlogUSATFAnatsaBlogUSAhttps://www.threatfabric.com/hubfs/TF_Blog_Letscall.jpgTFBlogLetscallTFBlogLetscallhttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard.pngThreatFabricSocialCardThreatFabricSocialCardhttps://www.threatfabric.com/hubfs/TF_LightSpyiOS.jpgTFLightSpyiOSTFLightSpyiOShttps://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_Rocinante_trojan_horse_with_wi_e5df5bee-17f2-4b62-a14c-776da7c6a06f.jpgharrytfmiyazakistyleimageofRocinantetrojanhorsewithwie5df5bee17f24b62a14c776da7c6a06fharrytfmiyazakistyleimageofRocinantetrojanhorsewithwie5df5bee17f24b62a14c776da7c6a06fhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207.1%20-%20Behavioral%20Analytics_Scams.jpgLightningCampaign71BehavioralAnalyticsScamsLightningCampaign71BehavioralAnalyticsScamshttps://www.threatfabric.com/hubfs/image%20(2).pngimage2image2https://www.threatfabric.com/hubfs/TF_Bull.jpgTFBullTFBullhttps://www.threatfabric.com/hubfs/TF_HologramLaptop_16-9%20(1).pngTFHologramLaptop1691TFHologramLaptop1691https://www.threatfabric.com/hubfs/TF_FusionFireside_HakonAkerlund.jpgTFFusionFiresideHakonAkerlundTFFusionFiresideHakonAkerlundhttps://www.threatfabric.com/hubfs/MTI_Perseus.jpgMTIPerseusMTIPerseushttps://www.threatfabric.com/hubfs/Threatfabric/images/tf_blog_ba.jpgtfblogbatfblogbahttps://www.threatfabric.com/hubfs/TF_PressRelease_Onespan2.jpgTFPressReleaseOnespan2TFPressReleaseOnespan2https://www.threatfabric.com/hubfs/TF_Team_Maurits.pngTFTeamMauritsTFTeamMauritshttps://www.threatfabric.com/hubfs/TF_FusionFireside_Announcement3.pngTFFusionFiresideAnnouncement3TFFusionFiresideAnnouncement3https://www.threatfabric.com/hubfs/TF_Blog_Crocodilus.jpgTFBlogCrocodilusTFBlogCrocodilushttps://www.threatfabric.com/hubfs/Threatfabric/images/cover.jpgcovercoverhttps://www.threatfabric.com/hubfs/TF_Datzbro.jpgTFDatzbroTFDatzbrohttps://www.threatfabric.com/hubfs/TF_FusionFireside_GaryWarner.jpgTFFusionFiresideGaryWarnerTFFusionFiresideGaryWarnerhttps://www.threatfabric.com/hubfs/APP%20Fraud%20Reimbursement%20in%20the%20UK.pngAPPFraudReimbursementintheUKAPPFraudReimbursementintheUKhttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(113).pngMicrosoftTeamsimage113MicrosoftTeamsimage113https://www.threatfabric.com/hubfs/TF_LightSpy-1.jpgTFLightSpy1TFLightSpy1https://www.threatfabric.com/hubfs/Threatfabric/images/tf_q2_2022_mobilethreatlandscape_sheetsize.001.jpegtfq22022mobilethreatlandscapesheetsize001tfq22022mobilethreatlandscapesheetsize001https://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(38).pngMicrosoftTeamsimage38MicrosoftTeamsimage38https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_MobileBankingMalware.pngTFCyberfraudKillchainMobileBankingMalwareTFCyberfraudKillchainMobileBankingMalwarehttps://www.threatfabric.com/hubfs/PR-Threat-fabric-1-1.jpgPRThreatfabric11PRThreatfabric11https://www.threatfabric.com/hubfs/social-suggested-images/TF_AndroidDroppers2.jpgTFAndroidDroppers2TFAndroidDroppers2https://www.threatfabric.com/hubfs/TF_HyenaHologram.jpgTFHyenaHologramTFHyenaHologramhttps://www.threatfabric.com/hubfs/cover-2.pngcover2cover2https://www.threatfabric.com/hubfs/Threatfabric/images/tf_core_story_2022_chs_v1.6.025.jpegtfcorestory2022chsv16025tfcorestory2022chsv16025https://www.threatfabric.com/hubfs/TF_FusionFireside_ChrisBone.jpgTFFusionFiresideChrisBoneTFFusionFiresideChrisBonehttps://www.threatfabric.com/hubfs/TF_Octo2.jpgTFOcto2TFOcto2https://www.threatfabric.com/hubfs/TF_FusionFireside_CraigRice.pngTFFusionFiresideCraigRiceTFFusionFiresideCraigRicehttps://www.threatfabric.com/hubfs/harry_tf_researcher_sitting_behind_desk_in_front_of_giant_glass_b54cab5e-4166-4c7e-9757-1aa42d2fe360.jpgharrytfresearchersittingbehinddeskinfrontofgiantglassb54cab5e41664c7e97571aa42d2fe360harrytfresearchersittingbehinddeskinfrontofgiantglassb54cab5e41664c7e97571aa42d2fe360https://www.threatfabric.com/hubfs/TF_Team_Eward.jpgTFTeamEwardTFTeamEwardhttps://www.threatfabric.com/hubfs/ShiftLeftOnFraud_FeaturedImage2.jpgShiftLeftOnFraudFeaturedImage2ShiftLeftOnFraudFeaturedImage2https://www.threatfabric.com/hubfs/TF_MTI_RatOn-01.jpgTFMTIRatOn01TFMTIRatOn01https://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_VishingRATFraud_FeaturedImage.pngTFCyberfraudKillchainVishingRATFraudFeaturedImageTFCyberfraudKillchainVishingRATFraudFeaturedImagehttps://www.threatfabric.com/hubfs/TF_FusionFireside_PatrickBours.jpgTFFusionFiresidePatrickBoursTFFusionFiresidePatrickBourshttps://www.threatfabric.com/hubfs/TF_Team_Emma.jpgTFTeamEmmaTFTeamEmmahttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_RomanceFraud_FeaturedImage.pngTFCyberfraudKillchainRomanceFraudFeaturedImageTFCyberfraudKillchainRomanceFraudFeaturedImagehttps://www.threatfabric.com/hubfs/TF_FusionFireside_AntonJanCozijnsen.jpgTFFusionFiresideAntonJanCozijnsenTFFusionFiresideAntonJanCozijnsenhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/harry_tf_money_coins_in_well_miyazaki_style_drawing_of_water_we_0237f000-5c27-4a04-bb8c-864f66d32459.jpgharrytfmoneycoinsinwellmiyazakistyledrawingofwaterwe0237f0005c274a04bb8c864f66d32459harrytfmoneycoinsinwellmiyazakistyledrawingofwaterwe0237f0005c274a04bb8c864f66d32459https://www.threatfabric.com/hubfs/Threatfabric/images/cover%20(1).pngcover1cover1https://www.threatfabric.com/hubfs/Threatfabric/images/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blogpost-placeholder.pngblogpostplaceholderblogpostplaceholderhttps://www.threatfabric.com/hubfs/Threatfabric/images/brasdex-cover-minified.pngbrasdexcoverminifiedbrasdexcoverminifiedhttps://www.threatfabric.com/hubfs/Inform_PartnershipAnnouncement_SOCIAL.jpgInformPartnershipAnnouncementSOCIALInformPartnershipAnnouncementSOCIALhttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207%20-%20Behavioral%20Analytics_MobileMalware-1.jpgLightningCampaign7BehavioralAnalyticsMobileMalware1LightningCampaign7BehavioralAnalyticsMobileMalware1https://www.threatfabric.com/hubfs/Threatfabric/images/cover-1.jpgcover1cover1https://www.threatfabric.com/hubfs/TF_FusionFireside_TeresaWalsh.pngTFFusionFiresideTeresaWalshTFFusionFiresideTeresaWalshhttps://www.threatfabric.com/hubfs/TF%20x%20Trapets%20Design%20Logo.pngTFxTrapetsDesignLogoTFxTrapetsDesignLogohttps://www.threatfabric.com/hubfs/TF_SecuriDropper_Social.jpgTFSecuriDropperSocialTFSecuriDropperSocialhttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_PigButchering_FeaturedImage.jpgTFCyberfraudKillchainPigButcheringFeaturedImageTFCyberfraudKillchainPigButcheringFeaturedImagehttps://www.threatfabric.com/hubfs/TF_Chameleon_2024.jpgTFChameleon2024TFChameleon20242024-09-03https://www.threatfabric.com/blogs/android-droppers-the-silent-gatekeepers-of-malwarehttps://www.threatfabric.com/hubfs/App_Installed_Via_Dropper.mov/medium.jpgExample of app installation through dropper appExample of app installation through dropper apphttps://www.threatfabric.com/hubfs/App_Installed_Via_Dropper.mov24nonohttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/image-png-Aug-14-2025-07-36-03-8463-AM.pngimagepngAug1420250736038463AMimagepngAug1420250736038463AMhttps://www.threatfabric.com/hubfs/image-png-Aug-25-2025-07-24-00-6500-AM.pngimagepngAug2520250724006500AMimagepngAug2520250724006500AMhttps://www.threatfabric.com/hubfs/App_blocked-2.pngAppblocked2Appblocked2https://www.threatfabric.com/hubfs/social-suggested-images/TF_AndroidDroppers2.jpgTFAndroidDroppers2TFAndroidDroppers2https://www.threatfabric.com/hubfs/image-png-Aug-22-2025-08-37-31-7983-AM.pngimagepngAug2220250837317983AMimagepngAug2220250837317983AMhttps://www.threatfabric.com/hubfs/40185.png40185401852025-08-27https://www.threatfabric.com/blogs/xenomorph-a-newly-hatched-banking-trojanhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/a11y.webpa11ya11yhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/code_reuse.webpcodereusecodereusehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/gp_dropper.webpgpdroppergpdropperhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/overlays.webpoverlaysoverlayshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/features.webpfeaturesfeatureshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/ring0.webpring0ring02023-06-27https://www.threatfabric.com/blogs/threatfabric-appoints-rohan-mer-as-regional-account-directorhttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(113).pngMicrosoftTeamsimage113MicrosoftTeamsimage113https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2024-02-09https://www.threatfabric.com/blogs/fusion-fireside-7-a-conversation-with-dave-laramy-from-danske-bankhttps://www.threatfabric.com/hubfs/TF_FusionFireside_DaveLaramy%201-1.jpgTFFusionFiresideDaveLaramy11TFFusionFiresideDaveLaramy11https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-01-23https://www.threatfabric.com/blogs/threatfabric-appoints-eward-driehuis-as-vp-of-fraud-engineeringhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_Team_Eward.jpgTFTeamEwardTFTeamEwardhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-09-15https://www.threatfabric.com/blogs/xenomorphhttps://www.threatfabric.com/hubfs/Slide3-1.pngSlide31Slide31https://www.threatfabric.com/hubfs/TF_Bull.jpgTFBullTFBullhttps://www.threatfabric.com/hubfs/Slide6.pngSlide6Slide6https://www.threatfabric.com/hubfs/Slide1-1.pngSlide11Slide11https://www.threatfabric.com/hubfs/Slide3-3.pngSlide33Slide33https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Slide5-2.pngSlide52Slide52https://www.threatfabric.com/hubfs/Slide5-1.pngSlide51Slide51https://www.threatfabric.com/hubfs/Slide7.pngSlide7Slide7https://www.threatfabric.com/hubfs/Slide4-2.pngSlide42Slide42https://www.threatfabric.com/hubfs/Slide4-1.pngSlide41Slide41https://www.threatfabric.com/hubfs/Slide2-1.pngSlide21Slide21https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide6-1.pngSlide61Slide612023-11-07https://www.threatfabric.com/blogs/clarity-on-australian-scam-regulationshttps://www.threatfabric.com/hubfs/KenPalla.pngKenPallaKenPallahttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_KenPalla_ClarityOnAustralianScamRegulations_SOCIAL.jpgTFKenPallaClarityOnAustralianScamRegulationsSOCIALTFKenPallaClarityOnAustralianScamRegulationsSOCIALhttps://www.threatfabric.com/hubfs/40185.png40185401852024-10-15https://www.threatfabric.com/blogs/android-banking-trojan-chameleon-is-back-in-actionhttps://www.threatfabric.com/hubfs/image-png-Dec-06-2023-07-04-29-4927-PM.pngimagepngDec0620230704294927PMimagepngDec0620230704294927PMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/image-png-Dec-07-2023-10-11-01-9565-AM.pngimagepngDec0720231011019565AMimagepngDec0720231011019565AMhttps://www.threatfabric.com/hubfs/image-png-Nov-29-2023-04-31-16-9294-PM.pngimagepngNov2920230431169294PMimagepngNov2920230431169294PMhttps://www.threatfabric.com/hubfs/TF_Chameleon.jpgTFChameleonTFChameleonhttps://www.threatfabric.com/hubfs/image-png-Dec-13-2023-09-01-56-4869-PM.pngimagepngDec1320230901564869PMimagepngDec1320230901564869PMhttps://www.threatfabric.com/hubfs/40185.png40185401852024-01-03https://www.threatfabric.com/privacyhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852026-04-01https://www.threatfabric.com/blogs/behavioural-analytics-privacy-and-regulationhttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207.2%20-%20Behavioral%20Analytics_Privacy.jpgLightningCampaign72BehavioralAnalyticsPrivacyLightningCampaign72BehavioralAnalyticsPrivacyhttps://www.threatfabric.com/hubfs/Screenshot%202025-04-02%20at%2010.55.25.pngScreenshot20250402at105525Screenshot20250402at105525https://www.threatfabric.com/hubfs/Blof%202%20image%20.pngBlof2imageBlof2imagehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-04-08https://www.threatfabric.com/scam-prevention-in-the-nordics-with-behavioural-analyticshttps://www.threatfabric.com/hubfs/synergy.pngsynergysynergyhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202024-12-10%20at%2015.27.42.pngScreenshot20241210at152742Screenshot20241210at152742https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/ScamCreature.jpgScamCreatureScamCreature2026-03-16https://www.threatfabric.com/blogs/rabobank-joins-threatfabric-investors-to-accelerate-fraud-prevention-growth-through-co-creationhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_RaboInvestments_SOCIAL%201.pngTFRaboInvestmentsSOCIAL1TFRaboInvestmentsSOCIAL12024-12-04https://www.threatfabric.com/blogs/fraud-year-in-review-what-2025-taught-us-for-20262025-11-12https://www.threatfabric.com/blogs/the-rise-of-raton-from-nfc-heists-to-remote-control-and-atshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr8.pngscr8scr8https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr2.pngscr2scr2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr11.pngscr11scr11https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr14_edit.pngscr14editscr14edithttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr15.pngscr15scr15https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr3.pngscr3scr3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/nf3.pngnf3nf3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr9.pngscr9scr9https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr6.pngscr6scr6https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr7.pngscr7scr7https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr1_cut.pngscr1cutscr1cuthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr10.pngscr10scr10https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr4.pngscr4scr4https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/nf4.pngnf4nf4https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr12.pngscr12scr12https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr5.pngscr5scr5https://www.threatfabric.com/hubfs/TF_MTI_RatOn-01.jpgTFMTIRatOn01TFMTIRatOn01https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr13.pngscr13scr132025-09-09https://www.threatfabric.com/blogs/google-play-droppershttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/anatsa.webpanatsaanatsahttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/gymdrop.webpgymdropgymdrophttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/us_campaigns.webpuscampaignsuscampaignshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/gymdrop_filtering.webpgymdropfilteringgymdropfilteringhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/gymdrop_website.webpgymdropwebsitegymdropwebsitehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/alien_campaigns.webpaliencampaignsaliencampaignshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/brunhilda_installation.webpbrunhildainstallationbrunhildainstallationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/droppers.webpdroppersdroppershttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/gymdrop_update.webpgymdropupdategymdropupdatehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/qr_scanner.webpqrscannerqrscannerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP1.webpGP1GP1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/alien_installation.webpalieninstallationalieninstallationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/versions.webpversionsversionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP_fud.webpGPfudGPfudhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP2.webpGP2GP2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/c2_communication.webpc2communicationc2communicationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP_tactics.webpGPtacticsGPtacticshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/update_process.webpupdateprocessupdateprocesshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/filtering.webpfilteringfilteringhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP_fam_stats.webpGPfamstatsGPfamstatshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/timeline.webptimelinetimelinehttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/perseus-dto-malware-that-takes-noteshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/MTI_Perseus.jpgMTIPerseusMTIPerseushttps://www.threatfabric.com/hubfs/Perseus_report_4.pngPerseusreport4Perseusreport4https://www.threatfabric.com/hubfs/Perseus_report_2.pngPerseusreport2Perseusreport2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Perseus_report_3.pngPerseusreport3Perseusreport3https://www.threatfabric.com/hubfs/Perseus_report_1-1.pngPerseusreport11Perseusreport11https://www.threatfabric.com/hubfs/Screenshot%202026-03-18%20at%2011-33-45-png.pngScreenshot20260318at113345pngScreenshot20260318at113345pnghttps://www.threatfabric.com/hubfs/Screenshot%202026-03-18%20at%2011.31.14.pngScreenshot20260318at113114Screenshot20260318at113114https://www.threatfabric.com/hubfs/image-png-Mar-18-2026-10-27-19-7485-AM.pngimagepngMar1820261027197485AMimagepngMar1820261027197485AM2026-03-19https://www.threatfabric.com/blogs/the-trojan-horse-that-wanted-to-fly-rocinantehttps://www.threatfabric.com/hubfs/1.png11https://www.threatfabric.com/hubfs/ermac.pngermacermachttps://www.threatfabric.com/hubfs/TF_2024_Q2_Threat_Briefing_Akbank.pngTF2024Q2ThreatBriefingAkbankTF2024Q2ThreatBriefingAkbankhttps://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_Rocinante_trojan_horse_with_wi_e5df5bee-17f2-4b62-a14c-776da7c6a06f.jpgharrytfmiyazakistyleimageofRocinantetrojanhorsewithwie5df5bee17f24b62a14c776da7c6a06fharrytfmiyazakistyleimageofRocinantetrojanhorsewithwie5df5bee17f24b62a14c776da7c6a06fhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/targets-1.pngtargets1targets1https://www.threatfabric.com/hubfs/aaaaaaa.pngaaaaaaaaaaaaaahttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/capabilities.pngcapabilitiescapabilities2024-08-28https://www.threatfabric.com/jobs/senior-javascript-researcher-engineerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-05-18https://www.threatfabric.com/blogs/anatsa-trojan-returns-targeting-europe-and-expanding-its-reachhttps://www.threatfabric.com/hubfs/Slide4.jpegSlide4Slide4https://www.threatfabric.com/hubfs/TF_Anatsa_Blog2.pngTFAnatsaBlog2TFAnatsaBlog2https://www.threatfabric.com/hubfs/Slide3-1.jpegSlide31Slide31https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Slide2-1.jpegSlide21Slide212024-02-19https://www.threatfabric.com/blogs/getting-ready-for-psr-in-the-uk-why-fraud-fusion-experts-should-carehttps://www.threatfabric.com/hubfs/PSR_Social1.jpgPSRSocial1PSRSocial1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852024-09-24https://www.threatfabric.com/blogs/partners-in-crime-medusa-cabassoushttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/recent_campaigns.webprecentcampaignsrecentcampaignshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/semi.ats.webpsemiatssemiatshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/capabilities.webpcapabilitiescapabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/direct_reply.webpdirectreplydirectreplyhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/side_by_side_mti.webpsidebysidemtisidebysidemtihttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/control_input_field.webpcontrolinputfieldcontrolinputfieldhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/configs_flu.webpconfigsfluconfigsflu2023-06-16https://www.threatfabric.com/resources/basic-voice-phishinghttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/fusion-fireside-5-the-art-of-fusion-with-jake-norwoodhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_JakeNorwood.jpgTFFusionFiresideJakeNorwoodTFFusionFiresideJakeNorwood2024-11-07https://www.threatfabric.com/blogs/threatfabric-partnership-announcement-trapetshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF%20x%20Trapets%20Design%20Logo.pngTFxTrapetsDesignLogoTFxTrapetsDesignLogo2023-06-16https://www.threatfabric.com/blogs/the-top-5-technology-requirements-for-fraud-prevention-in-financial-serviceshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_TechRequirements.jpgTFTechRequirementsTFTechRequirementshttps://www.threatfabric.com/hubfs/40185.png40185401852025-11-06https://www.threatfabric.com/blogs/behavioural-modelling-and-the-future-of-fraud-prevention-with-patrick-bourshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_PatrickBours.jpgTFFusionFiresidePatrickBoursTFFusionFiresidePatrickBours2025-09-25https://www.threatfabric.com/blogs/droppers-bypassing-android-13-restrictionshttps://www.threatfabric.com/hubfs/Slide7-1.pngSlide71Slide71https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide4-Oct-25-2023-01-17-13-1314-PM.pngSlide4Oct2520230117131314PMSlide4Oct2520230117131314PMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/SecuriDropper2.pngSecuriDropper2SecuriDropper2https://www.threatfabric.com/hubfs/SecuriDropper-1.pngSecuriDropper1SecuriDropper1https://www.threatfabric.com/hubfs/TF_SecuriDropper_Social.jpgTFSecuriDropperSocialTFSecuriDropperSocialhttps://www.threatfabric.com/hubfs/Slide6-4.pngSlide64Slide64https://www.threatfabric.com/hubfs/Slide5-4.pngSlide54Slide54https://www.threatfabric.com/hubfs/Slide1-3.pngSlide13Slide132023-11-07https://www.threatfabric.com/blogs/fusion-fireside-14-a-marine-in-cyber-with-john-fokkerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_JohnFokker.jpgTFFusionFiresideJohnFokkerTFFusionFiresideJohnFokkerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-12-03https://www.threatfabric.com/blogs/new-campaigns-spread-banking-malware-through-google-playhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_unknown_sources_enabled_user_has_to_acknowledge_the_install.webpnewcampaignsspreadbankingmalwarethroughgoogleplayunknownsourcesenableduserhastoacknowledgetheinstallnewcampaignsspreadbankingmalwarethroughgoogleplayunknownsourcesenableduserhastoacknowledgetheinstallhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_bankbot_dropper_detected_by_client_side_detection.pngnewcampaignsspreadbankingmalwarethroughgoogleplaybankbotdropperdetectedbyclientsidedetectionnewcampaignsspreadbankingmalwarethroughgoogleplaybankbotdropperdetectedbyclientsidedetectionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_no_detections_by_play_protect.pngnewcampaignsspreadbankingmalwarethroughgoogleplaynodetectionsbyplayprotectnewcampaignsspreadbankingmalwarethroughgoogleplaynodetectionsbyplayprotecthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_get_device_admin_and_download_malware_after_2_hours_code_snippet.webpnewcampaignsspreadbankingmalwarethroughgoogleplaygetdeviceadminanddownloadmalwareafter2hourscodesnippetnewcampaignsspreadbankingmalwarethroughgoogleplaygetdeviceadminanddownloadmalwareafter2hourscodesnippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_classic_solitaire.pngnewcampaignsspreadbankingmalwarethroughgoogleplayclassicsolitairenewcampaignsspreadbankingmalwarethroughgoogleplayclassicsolitairehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_installed_apps_list.pngnewcampaignsspreadbankingmalwarethroughgoogleplayinstalledappslistnewcampaignsspreadbankingmalwarethroughgoogleplayinstalledappslisthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_tornado_flashlight.pngnewcampaignsspreadbankingmalwarethroughgoogleplaytornadoflashlightnewcampaignsspreadbankingmalwarethroughgoogleplaytornadoflashlighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_unknown_sources_disabled_install_is_blocked.pngnewcampaignsspreadbankingmalwarethroughgoogleplayunknownsourcesdisabledinstallisblockednewcampaignsspreadbankingmalwarethroughgoogleplayunknownsourcesdisabledinstallisblockedhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_lamp_for_darkness.pngnewcampaignsspreadbankingmalwarethroughgoogleplaylampfordarknessnewcampaignsspreadbankingmalwarethroughgoogleplaylampfordarknesshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_collaboration.pngnewcampaignsspreadbankingmalwarethroughgoogleplaycollaborationnewcampaignsspreadbankingmalwarethroughgoogleplaycollaborationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_malware_installation_routine_code_snippet.pngnewcampaignsspreadbankingmalwarethroughgoogleplaymalwareinstallationroutinecodesnippetnewcampaignsspreadbankingmalwarethroughgoogleplaymalwareinstallationroutinecodesnippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_spider_solitare.pngnewcampaignsspreadbankingmalwarethroughgoogleplayspidersolitarenewcampaignsspreadbankingmalwarethroughgoogleplayspidersolitarehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_only_start_dropper_functionality_when_target_is_available_code_snippet.pngnewcampaignsspreadbankingmalwarethroughgoogleplayonlystartdropperfunctionalitywhentargetisavailablecodesnippetnewcampaignsspreadbankingmalwarethroughgoogleplayonlystartdropperfunctionalitywhentargetisavailablecodesnippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_bankbot_dropper_on_google_play.webpnewcampaignsspreadbankingmalwarethroughgoogleplaybankbotdropperongoogleplaynewcampaignsspreadbankingmalwarethroughgoogleplaybankbotdropperongoogleplayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_xdc_cleaner.pngnewcampaignsspreadbankingmalwarethroughgoogleplayxdccleanernewcampaignsspreadbankingmalwarethroughgoogleplayxdccleanerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_solitaire.pngnewcampaignsspreadbankingmalwarethroughgoogleplaysolitairenewcampaignsspreadbankingmalwarethroughgoogleplaysolitaire2023-03-03https://www.threatfabric.com/resources/andromeda-the-latest-brazilian-dto-malwarehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ontwerper_miyazaki_style_drawing_of_robot_creature_with_brazili_f71561c8-d394-4c4a-acbd-d5e586a99571.pngontwerpermiyazakistyledrawingofrobotcreaturewithbrazilif71561c8d3944c4aacbdd5e586a99571ontwerpermiyazakistyledrawingofrobotcreaturewithbrazilif71561c8d3944c4aacbdd5e586a995712023-09-12https://www.threatfabric.com/blogs/h1-2022-mobile-threat-landscapehttps://www.threatfabric.com/hubfs/Threatfabric/images/tf_q2_2022_mobilethreatlandscape_sheetsize.001.jpegtfq22022mobilethreatlandscapesheetsize001tfq22022mobilethreatlandscapesheetsize001https://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/droppers.webpdroppersdroppershttps://www.threatfabric.com/hubfs/Threatfabric/images/voice.pngvoicevoicehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/families.webpfamiliesfamilieshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/fraud.webpfraudfraudhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/dropper.webpdropperdropperhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/poc.webppocpochttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/ca.webpcacahttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/odffamilies.webpodffamiliesodffamilieshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/ermac.webpermacermachttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/stats.webpstatsstatshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/installation.webpinstallationinstallationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/countries.webpcountriescountries2023-06-27https://www.threatfabric.com/blogs/spynote-rat-targeting-financial-institutionshttps://www.threatfabric.com/hubfs/Threatfabric/images/spyNote-discovered-campaign.pngspyNotediscoveredcampaignspyNotediscoveredcampaignhttps://www.threatfabric.com/hubfs/Threatfabric/images/spyNote-Bank-Impersonation.pngspyNoteBankImpersonationspyNoteBankImpersonationhttps://www.threatfabric.com/hubfs/Threatfabric/images/spynote-capabilities.pngspynotecapabilitiesspynotecapabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/images/TF-SpyNote-Statistical.pngTFSpyNoteStatisticalTFSpyNoteStatisticalhttps://www.threatfabric.com/hubfs/Threatfabric/images/cypherRat-Released-free.pngcypherRatReleasedfreecypherRatReleasedfreehttps://www.threatfabric.com/hubfs/Threatfabric/images/TF_SpyNote_Sales.pngTFSpyNoteSalesTFSpyNoteSaleshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/spyware.pngspywarespywarehttps://www.threatfabric.com/hubfs/Threatfabric/images/TF-SpyNote-accessibility.pngTFSpyNoteaccessibilityTFSpyNoteaccessibility2023-06-27https://www.threatfabric.com/blogs/the-rage-of-android-banking-trojanshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/conclusion.webpconclusionconclusionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/catalysts.webpcatalystscatalystshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/evasion.webpevasionevasionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/ats.webpatsatshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/top_targets.webptoptargetstoptargetshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/labels.webplabelslabelshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/distribution.webpdistributiondistributionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/MO.webpMOMOhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/gustuff.webpgustuffgustuffhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/overlay.webpoverlayoverlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/recap.webprecaprecaphttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/github.webpgithubgithubhttps://www.threatfabric.com/hubfs/40185.png40185401852023-06-27https://www.threatfabric.com/blogs/zombinder-ermac-and-desktop-stealershttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/binding.pngbindingbindinghttps://www.threatfabric.com/hubfs/Threatfabric/images/laplas.pnglaplaslaplashttps://www.threatfabric.com/hubfs/Threatfabric/images/aurora.pngauroraaurorahttps://www.threatfabric.com/hubfs/Threatfabric/images/erbium.pngerbiumerbiumhttps://www.threatfabric.com/hubfs/Threatfabric/images/xenomorph.pngxenomorphxenomorphhttps://www.threatfabric.com/hubfs/Threatfabric/images/xenomorph_vidmate.pngxenomorphvidmatexenomorphvidmatehttps://www.threatfabric.com/hubfs/Threatfabric/images/cover.jpgcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/website.pngwebsitewebsitehttps://www.threatfabric.com/hubfs/Threatfabric/images/zombinder.pngzombinderzombinderhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/dropper.pngdropperdropper2023-06-16https://www.threatfabric.com/blogs/exobot-android-malware-spreading-via-google-play-storehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot/exobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_infected_android_versions.pngexobotandroidmalwarespreadingviagoogleplaystorenewappsdroppingexobotmalwareviagoogleplayinfectedandroidversionsexobotandroidmalwarespreadingviagoogleplaystorenewappsdroppingexobotmalwareviagoogleplayinfectedandroidversionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot/exobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play.webpexobotandroidmalwarespreadingviagoogleplaystorenewappsdroppingexobotmalwareviagoogleplayexobotandroidmalwarespreadingviagoogleplaystorenewappsdroppingexobotmalwareviagoogleplayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot/exobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_number_of_infected_devices_per_country.pngexobotandroidmalwarespreadingviagoogleplaystorenewappsdroppingexobotmalwareviagoogleplaynumberofinfecteddevicespercountryexobotandroidmalwarespreadingviagoogleplaystorenewappsdroppingexobotmalwareviagoogleplaynumberofinfecteddevicespercountryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot/exobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_the_usveryfood_botnet.webpexobotandroidmalwarespreadingviagoogleplaystorenewappsdroppingexobotmalwareviagoogleplaytheusveryfoodbotnetexobotandroidmalwarespreadingviagoogleplaystorenewappsdroppingexobotmalwareviagoogleplaytheusveryfoodbotnethttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-03-03https://www.threatfabric.com/blogs/vishing-rat-fraud-vs-fraud-kill-chainhttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.04.pngScreenshot20240304at085204Screenshot20240304at085204https://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.51.20.pngScreenshot20240304at085120Screenshot20240304at085120https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_VishingRATFraud_FeaturedImage.pngTFCyberfraudKillchainVishingRATFraudFeaturedImageTFCyberfraudKillchainVishingRATFraudFeaturedImagehttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_VishingRATFraud_Details.pngTFCyberfraudKillchainVishingRATFraudDetailsTFCyberfraudKillchainVishingRATFraudDetailshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202024-03-26%20at%2009.44.50.pngScreenshot20240326at094450Screenshot20240326at0944502024-03-26https://www.threatfabric.com/blogs/achieving-new-heights-iso-27701-and-iso-22301-certificationshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/image%20(2).pngimage2image2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2024-07-23https://www.threatfabric.com/blogs/lightspy-mapt-mobile-payment-system-attackhttps://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2015.33.37.pngScreenshot20230907at153337Screenshot20230907at153337https://www.threatfabric.com/hubfs/Screenshot%202023-08-17%20at%2017.57.23%20copy%202.pngScreenshot20230817at175723copy2Screenshot20230817at175723copy2https://www.threatfabric.com/hubfs/TF_LightSpy-1.jpgTFLightSpy1TFLightSpy1https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2014.42.30.pngScreenshot20230905at144230Screenshot20230905at144230https://www.threatfabric.com/hubfs/Screenshot%202023-08-25%20at%2016.37.39.pngScreenshot20230825at163739Screenshot20230825at163739https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2016.06.19.pngScreenshot20230907at160619Screenshot20230907at160619https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2014.41.25.pngScreenshot20230905at144125Screenshot20230905at144125https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2016.06.40.pngScreenshot20230905at160640Screenshot20230905at160640https://www.threatfabric.com/hubfs/Screenshot%202023-08-10%20at%2012.30.15%20copy.pngScreenshot20230810at123015copyScreenshot20230810at123015copyhttps://www.threatfabric.com/hubfs/ios_expoit_chain_lightspy_07.pngiosexpoitchainlightspy07iosexpoitchainlightspy07https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2011.16.02.pngScreenshot20230905at111602Screenshot20230905at111602https://www.threatfabric.com/hubfs/Screenshot%202023-09-04%20at%2013.09.06.pngScreenshot20230904at130906Screenshot20230904at130906https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2015.32.22.pngScreenshot20230907at153222Screenshot20230907at153222https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2016.13.28.pngScreenshot20230907at161328Screenshot20230907at161328https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2011.06.39.pngScreenshot20230907at110639Screenshot20230907at110639https://www.threatfabric.com/hubfs/Screenshot%202023-09-15%20at%2011.42.54.pngScreenshot20230915at114254Screenshot20230915at114254https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2015.58.48.pngScreenshot20230907at155848Screenshot20230907at155848https://www.threatfabric.com/hubfs/Screenshot%202023-08-28%20at%2016.02.24.pngScreenshot20230828at160224Screenshot20230828at160224https://www.threatfabric.com/hubfs/Screenshot%202023-09-15%20at%2012.52.02.pngScreenshot20230915at125202Screenshot20230915at125202https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2011.57.29.pngScreenshot20230907at115729Screenshot20230907at115729https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2011.54.14%20copy.pngScreenshot20230907at115414copyScreenshot20230907at115414copyhttps://www.threatfabric.com/hubfs/Screenshot%202023-09-15%20at%2016.32.34.pngScreenshot20230915at163234Screenshot20230915at163234https://www.threatfabric.com/hubfs/Screenshot%202023-08-25%20at%2017.40.23.pngScreenshot20230825at174023Screenshot20230825at174023https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2016.43.27.pngScreenshot20230905at164327Screenshot20230905at164327https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2015.35.18.pngScreenshot20230907at153518Screenshot20230907at153518https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2016.16.47.pngScreenshot20230907at161647Screenshot20230907at161647https://www.threatfabric.com/hubfs/Screenshot%202023-08-18%20at%2010.45.41%20copy.pngScreenshot20230818at104541copyScreenshot20230818at104541copyhttps://www.threatfabric.com/hubfs/Screenshot%202023-09-03%20at%2011.32.25.pngScreenshot20230903at113225Screenshot20230903at113225https://www.threatfabric.com/hubfs/TF_LightSpy_Toolset.pngTFLightSpyToolsetTFLightSpyToolsethttps://www.threatfabric.com/hubfs/Screenshot%202023-09-04%20at%2017.08.27.pngScreenshot20230904at170827Screenshot20230904at170827https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2014.35.16.pngScreenshot20230905at143516Screenshot20230905at143516https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2012.02.06.pngScreenshot20230907at120206Screenshot20230907at120206https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2011.24.03.pngScreenshot20230905at112403Screenshot20230905at112403https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2014.51.07.pngScreenshot20230905at145107Screenshot20230905at145107https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Screenshot%202023-08-09%20at%2014.11.33%20copy.pngScreenshot20230809at141133copyScreenshot20230809at141133copyhttps://www.threatfabric.com/hubfs/Screenshot%202023-09-15%20at%2014.43.31.pngScreenshot20230915at144331Screenshot20230915at144331https://www.threatfabric.com/hubfs/40185.png40185401852023-10-02https://www.threatfabric.com/blogs/the-attack-of-the-droppershttps://www.threatfabric.com/hubfs/Threatfabric/images/capabilities%20(1).pngcapabilities1capabilities1https://www.threatfabric.com/hubfs/Threatfabric/images/evolution-1.pngevolution1evolution1https://www.threatfabric.com/hubfs/Threatfabric/images/distribution.pngdistributiondistributionhttps://www.threatfabric.com/hubfs/Threatfabric/images/permissions.pngpermissionspermissionshttps://www.threatfabric.com/hubfs/Threatfabric/images/requests.pngrequestsrequestshttps://www.threatfabric.com/hubfs/Threatfabric/images/cover%20(1).pngcover1cover1https://www.threatfabric.com/hubfs/Threatfabric/images/strings.pngstringsstringshttps://www.threatfabric.com/hubfs/Threatfabric/images/installation.jpginstallationinstallationhttps://www.threatfabric.com/hubfs/Threatfabric/images/sharkbot_dropper_2.pngsharkbotdropper2sharkbotdropper2https://www.threatfabric.com/hubfs/Threatfabric/images/fake_update.pngfakeupdatefakeupdatehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/sharkbot_dropper.pngsharkbotdroppersharkbotdropperhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/droppers.pngdroppersdroppershttps://www.threatfabric.com/hubfs/Threatfabric/images/a11y.pnga11ya11y2023-06-16https://www.threatfabric.com/blogs/lightspy-implant-for-ioshttps://www.threatfabric.com/hubfs/TF_LightSpyiOS.jpgTFLightSpyiOSTFLightSpyiOShttps://www.threatfabric.com/hubfs/Screenshot%202024-07-10%20at%2016.53.55.pngScreenshot20240710at165355Screenshot20240710at165355https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2014.36.08.pngScreenshot20240722at143608Screenshot20240722at143608https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-25%20at%2010.48.12.pngScreenshot20240725at104812Screenshot20240725at104812https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-30%20at%2011.37.13.pngScreenshot20240730at113713Screenshot20240730at113713https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-17%20at%2013.33.40.pngScreenshot20240717at133340Screenshot20240717at133340https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/LightSpy-iOS-Layout.bmpLightSpyiOSLayoutLightSpyiOSLayouthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2012.28.38.pngScreenshot20240723at122838Screenshot20240723at122838https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-17%20at%2018.00.56.pngScreenshot20240717at180056Screenshot20240717at180056https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-26%20at%2015.13.50.pngScreenshot20240726at151350Screenshot20240726at151350https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2016.19.49.pngScreenshot20240723at161949Screenshot20240723at161949https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-24%20at%2018.04.08.pngScreenshot20240724at180408Screenshot20240724at180408https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2016.10.59.pngScreenshot20240723at161059Screenshot20240723at161059https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-26%20at%2015.13.28.pngScreenshot20240726at151328Screenshot20240726at151328https://www.threatfabric.com/hubfs/Screenshot%202024-07-29%20at%2014.06.32.pngScreenshot20240729at140632Screenshot20240729at140632https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2016.29.58.pngScreenshot20240723at162958Screenshot20240723at162958https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-18%20at%2010.13.19.pngScreenshot20240718at101319Screenshot20240718at101319https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2013.49.11.pngScreenshot20240722at134911Screenshot20240722at134911https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2014.14.35.pngScreenshot20240722at141435Screenshot20240722at141435https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2013.30.20.pngScreenshot20240722at133020Screenshot20240722at133020https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2015.29.35.pngScreenshot20240722at152935Screenshot20240722at152935https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2016.15.03.pngScreenshot20240723at161503Screenshot20240723at161503https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-26%20at%2015.14.11.pngScreenshot20240726at151411Screenshot20240726at1514112024-10-29https://www.threatfabric.com/blogs/shift-left-on-fraud-turning-fraud-management-into-fraud-preventionhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ShiftLeftOnFraud.pngShiftLeftOnFraudShiftLeftOnFraudhttps://www.threatfabric.com/hubfs/ShiftLeftOnFraud_FeaturedImage2.jpgShiftLeftOnFraudFeaturedImage2ShiftLeftOnFraudFeaturedImage22026-02-12https://www.threatfabric.com/blogs/building-a-bullet-proof-external-financial-fraud-intelligence-programhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/harry_tf_researcher_sitting_behind_desk_in_front_of_giant_glass_b54cab5e-4166-4c7e-9757-1aa42d2fe360.jpgharrytfresearchersittingbehinddeskinfrontofgiantglassb54cab5e41664c7e97571aa42d2fe360harrytfresearchersittingbehinddeskinfrontofgiantglassb54cab5e41664c7e97571aa42d2fe360https://www.threatfabric.com/hubfs/Brent%20Whittington.pngBrentWhittingtonBrentWhittington2024-08-22https://www.threatfabric.com/blogs/lightspy-implant-for-macoshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-05-01%20at%2012.06.51.pngScreenshot20240501at120651Screenshot20240501at120651https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-16%20at%2016.54.53.pngScreenshot20240416at165453Screenshot20240416at165453https://www.threatfabric.com/hubfs/macimplant1.pngmacimplant1macimplant1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/victims.pngvictimsvictimshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-05-01%20at%2017.47.58.pngScreenshot20240501at174758Screenshot20240501at174758https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2015.20.04.pngScreenshot20240415at152004Screenshot20240415at152004https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2012.01.45.pngScreenshot20240422at120145Screenshot20240422at120145https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-09%20at%2011.13.01.pngScreenshot20240409at111301Screenshot20240409at111301https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2017.52.34.pngScreenshot20240415at175234Screenshot20240415at175234https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2014.45.55.pngScreenshot20240415at144555Screenshot20240415at144555https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/xordecode.pngxordecodexordecodehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-05-01%20at%2012.17.21.pngScreenshot20240501at121721Screenshot20240501at121721https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2012.57.12.pngScreenshot20240415at125712Screenshot20240415at125712https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2014.48.10.pngScreenshot20240415at144810Screenshot20240415at144810https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-09%20at%2011.32.00.pngScreenshot20240409at113200Screenshot20240409at113200https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-17%20at%2014.46.59.pngScreenshot20240417at144659Screenshot20240417at144659https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-17%20at%2014.07.16.pngScreenshot20240417at140716Screenshot20240417at140716https://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bc.jpgharrytfmiyazakistyleimageofjellyfishplayingtugofwarw00f220c19dd844e89367e3e18b0485bcharrytfmiyazakistyleimageofjellyfishplayingtugofwarw00f220c19dd844e89367e3e18b0485bchttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2011.57.23.pngScreenshot20240422at115723Screenshot20240422at115723https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/bashscript.pngbashscriptbashscripthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2011.49.41.pngScreenshot20240422at114941Screenshot20240422at114941https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2014.12.56.pngScreenshot20240415at141256Screenshot20240415at141256https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2017.45.42.pngScreenshot20240415at174542Screenshot20240415at174542https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2015.12.50.pngScreenshot20240415at151250Screenshot20240415at151250https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-17%20at%2016.08.19.pngScreenshot20240417at160819Screenshot20240417at160819https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/2.bmp22https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2015.22.19.pngScreenshot20240415at152219Screenshot20240415at152219https://www.threatfabric.com/hubfs/weblogs.pngweblogsweblogshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2010.37.10.pngScreenshot20240415at103710Screenshot20240415at103710https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2010.34.32.pngScreenshot20240422at103432Screenshot20240422at103432https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2014.05.26.pngScreenshot20240422at140526Screenshot20240422at1405262024-05-30https://www.threatfabric.com/partnershttps://www.threatfabric.com/hubfs/TF_WebsiteAssets_Partners.pngTFWebsiteAssetsPartnersTFWebsiteAssetsPartnershttps://www.threatfabric.com/hubfs/Threatfabric/images/fraud-ecosystem-minified.pngfraudecosystemminifiedfraudecosystemminifiedhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-01-13https://www.threatfabric.com/resources/impersonation-scam-protectionhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(45).pngMicrosoftTeamsimage45MicrosoftTeamsimage452023-11-07https://www.threatfabric.com/blogs/xenomorph-malware-strikes-again-over-30-us-banks-now-targetedhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard.pngThreatFabricSocialCardThreatFabricSocialCardhttps://www.threatfabric.com/hubfs/40185.png40185401852023-09-27https://www.threatfabric.com/blogs/bankbot_dropper_hiding_on_google_playhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bankbot-dropper/bankbot_dropper_hiding_on_google_play_flow.mp4/medium.jpgDemonstration video of the threatDemonstration video of the threathttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bankbot-dropper/bankbot_dropper_hiding_on_google_play_flow.mp414nonohttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_permission_request_to_draw_over_apps.webpbankbotdropperhidingongoogleplaypermissionrequesttodrawoverappsbankbotdropperhidingongoogleplaypermissionrequesttodrawoverappshttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_bubble_shooter_wild_life_additional_information.webpbankbotdropperhidingongoogleplaybubbleshooterwildlifeadditionalinformationbankbotdropperhidingongoogleplaybubbleshooterwildlifeadditionalinformationhttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_earn_real_money_gift_cards.webpbankbotdropperhidingongoogleplayearnrealmoneygiftcardsbankbotdropperhidingongoogleplayearnrealmoneygiftcardshttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_dropper_installs_apk_from_sdcard.webpbankbotdropperhidingongoogleplaydropperinstallsapkfromsdcardbankbotdropperhidingongoogleplaydropperinstallsapkfromsdcardhttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_accessibility_service_enabled.webpbankbotdropperhidingongoogleplayaccessibilityserviceenabledbankbotdropperhidingongoogleplayaccessibilityserviceenabledhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_earn_real_money_gift_cards_additional_information.webpbankbotdropperhidingongoogleplayearnrealmoneygiftcardsadditionalinformationbankbotdropperhidingongoogleplayearnrealmoneygiftcardsadditionalinformationhttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_bubble_shooter_wild_life.webpbankbotdropperhidingongoogleplaybubbleshooterwildlifebankbotdropperhidingongoogleplaybubbleshooterwildlife2025-06-18https://www.threatfabric.com/resources/the-state-of-android-banking-malware-insights-from-2022-and-predictions-for-2023https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-08-24