Hackers forged Google Play Store pages to carry out cryptocurrency mining and wallet hijacking attacks targeting Brazilian users
Hackers have launched Android malware attacks in Brazil by spoofing a phishing page that mimics the Google Play Store. Currently, all known victims are located in Brazil.
The attackers set up a phishing website that closely resembles Google Play, enticing users to download a fake application called "INSS Reembolso." Once installed, the application releases hidden malicious code in stages and loads it directly into memory, leaving no visible files on the device, which makes it highly stealthy. One of the core functions of the malware is cryptocurrency mining, with an embedded XMRig mining program compiled for ARM devices that silently connects to the attacker's controlled mining server in the background. The program monitors battery level, temperature, and device usage status, dynamically adjusting mining behavior to evade detection, and bypasses Android's background process management mechanism by looping silent audio files.
Some variants also include banking trojans that can overlay fake pages on the USDT transfer interface of Binance and Trust Wallet, silently replacing the recipient address. Additionally, the malware supports various remote control commands such as recording, screenshotting, keylogging, and remote locking of the device.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Ethereum Account Abstraction Proposal EIP-8141 Included in Hegotá Upgrade

What Does the 'Niche Market' of Gold Mean?

Euro Stablecoin on Ethereum: $579 Million, More Than Double Solana and Base

Alliance: AI Agents Are the Missing Piece of Web3

DeFi Development Expands Holdings to 2.33 Million SOL with Resumption of Solana Purchases

Hammack Emphasizes Fed Independence and Need for Rate Hikes

With 34% of ETH Staked: How to Choose Staking in the Era of Native Compound Interest?

Private Air Defense from 20 Million UAH: Who Protects Ukrainian Businesses from Shelling and What Will Happen to the Market After the War

How one small BTC transfer exposed the fine print behind Trump’s ‘never sell’ strategic Bitcoin reserve

The ECB Unveils Its Plan to Tokenize Financial Markets

Who is vying for SRO status in the cryptocurrency exchange market? Why are they needed?

How GPU Financing Works: The Structure of USD.AI GPU Secured Loans

DGrid AI: Reconstructing Trust Mechanisms in AI Infrastructure with PoQ and Verification Nodes

Coincheck Completes Registration for Electronic Payment Services, Becomes Second Company in Japan

Ethereum Deposit Contract Draft Allows for Quantum-Resistant Keys

Connecticut sues Kalshi over unlicensed sports event contracts

FDA approves Rasonque, the first oral therapy targeting the RAS pathway in pancreatic cancer

Baidu Group to Dual-List on Hong Kong Stock Exchange and NASDAQ Starting September 1, 2026

Haiku R1 Beta 6 Arrives After Two Years, Reviving the Spirit of BeOS

Injective Expands AI Payment Experiment by Joining X402 Foundation

Havenex, the regulated exchange for banks: Series A round nearly closed

DefiLlama Introduces AAA-CCC Rating for DeFi Token Evaluation

xStocks Secures $1 Million Liquidity for 5 Assets

China Accumulates Gold: What is Beijing Preparing?

Resolv Foundation Updates RESOLV Token Vesting Rules

Pakistan Officially Launches Cryptocurrency License Application Portal, Existing Operators Must Apply by September 5

DeFi Development Launches Real-Time Data Platform for Solana

Ethereum EIP-839 Introduces Staking Changes to Protect Against Quantum Computers

Dashboard on the State of Solana: DFDV Worth 222 Million in SOL, but Loses 27 Million














