New trojan wave targets crypto wallets and banking apps

Zimperium’s zLabs discovered four Android trojan families (RecruitRat, SaferRat, Astrinox, Massiv) actively targeting more than 800 crypto, banking and social apps. The malware use overlay attacks, OTP interception, screen streaming and persistence tricks, spread via phishing sites, fake job offers and SMS lures, and employ anti-analysis and encryption techniques that produce near-zero detection by traditional security tools. For markets, this raises security and custody risks for Android users, could dent user confidence in mobile custodial wallets and exchanges, and may push more users toward hardware wallets, stricter KYC custodians, or iOS/desktop alternatives — a potentially negative (bearish) short-term impact on on-chain activity and retail trading of crypto such as BTCUSD until defenses improve.