A new Android Trojan known as Frogblight is targeting mobile users in Turkiye, aiming to drain bank accounts through sophisticated smishing attacks. First detected in August 2025 by Kaspersky’s Securelist, this malware has rapidly evolved, frequently updating to evade detection. Scammers mislead victims with fake court case and financial aid messages, prompting users to download compromised apps that appear legitimate. Once installed, Frogblight requests extensive permissions, masquerading as ‘Davalarım’ (My Court Cases).
This malicious software not only steals passwords but also acts as a spy, injecting hidden code into legitimate government websites to log user keystrokes and gather private information. Researchers highlight Frogblight’s increasing sophistication, including disguises as trusted apps and features like keylogging and contact list theft. To protect against such threats, users should avoid downloading APK files from untrusted sources and carefully scrutinize app permissions before installation. Stay vigilant to safeguard your financial information against evolving mobile banking threats.
Source link
