Hackers forged Google Play Store pages to carry out cryptocurrency mining and wallet hijacking attacks targeting Brazilian users
Hackers have launched Android malware attacks in Brazil by spoofing a phishing page that mimics the Google Play Store. Currently, all known victims are located in Brazil.
The attackers set up a phishing website that closely resembles Google Play, enticing users to download a fake application called "INSS Reembolso." Once installed, the application releases hidden malicious code in stages and loads it directly into memory, leaving no visible files on the device, which makes it highly stealthy. One of the core functions of the malware is cryptocurrency mining, with an embedded XMRig mining program compiled for ARM devices that silently connects to the attacker's controlled mining server in the background. The program monitors battery level, temperature, and device usage status, dynamically adjusting mining behavior to evade detection, and bypasses Android's background process management mechanism by looping silent audio files.
Some variants also include banking trojans that can overlay fake pages on the USDT transfer interface of Binance and Trust Wallet, silently replacing the recipient address. Additionally, the malware supports various remote control commands such as recording, screenshotting, keylogging, and remote locking of the device.
You may also like

Exchanging 200,000 for nearly 100 million, DeFi stablecoins face another attack

The underlying business agreement of the trillion-dollar Agent economy: Understanding ERC-8183, it's not just about payments, but the future

When Wall Street's ETH begins to "yield": Looking at the asset properties of Ethereum from BlackRock's ETHB

The Power of Agency: The Agentic Wallet and the Next Decade of Wallets

Understanding x402 and MPP in One Article: Two Routes for Agent Payments

Particle Founder: The entrepreneurial insights I have gained the most from in the past year

Huang Renxun's latest podcast transcript: The future of Nvidia, the development of embodied intelligence and agents, the explosion of inference demand, and the public relations crisis of artificial intelligence

OKX Ventures Research Report: AI Agent Economic Infrastructure Research Report (Part 1)

The migration of settlement rights: B18 and the institutional starting point of on-chain banks

From Tencent and Circle: Looking at the Simple and Difficult Questions of Investment

The second half of stablecoins no longer belongs to the crypto circle

Cursor "Shell" Kimi Controversy Reversed: From Copyright Infringement Allegations to Authorized Collaboration, China's Open Source Model Once Again Becomes a Global AI Foundation

The Real Reason Tokens Don't Sell: 90% of Crypto Projects Overlook Investor Relations

Is the income of pump.fun real, earning a million dollars a day despite the market downturn?

The real reason why tokens are not selling: 90% of crypto projects neglect investor relations

Who is the true winner of the "Tokenization" narrative?

Moss: The Era of AI-Traded by Anyone | Project Introduction
