https://www.threatfabric.com/blogs/fusion-fireside-19-from-twitter-threads-to-fraud-insights-with-becky-holmeshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_BeckyHolmes.jpgTF_FusionFireside_BeckyHolmesTF_FusionFireside_BeckyHolmeshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2026-05-28https://www.threatfabric.com/jobs/frontend-developer-vuejshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-18https://www.threatfabric.com/blogs/shift-left-on-fraud-turning-fraud-management-into-fraud-preventionhttps://www.threatfabric.com/hubfs/ShiftLeftOnFraud_FeaturedImage2.jpgShiftLeftOnFraud_FeaturedImage2ShiftLeftOnFraud_FeaturedImage2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/ShiftLeftOnFraud.pngShiftLeftOnFraudShiftLeftOnFraudhttps://www.threatfabric.com/hubfs/40185.png40185401852026-02-12https://www.threatfabric.com/blogs/the-malware-gap-why-fraud-security-controls-still-miss-mobile-malwarehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Screenshot%202026-04-02%20at%2011.29.29.pngScreenshot 2026-04-02 at 11.29.29Screenshot 2026-04-02 at 11.29.29https://www.threatfabric.com/hubfs/Screenshot%202026-04-02%20at%2011.28.37.pngScreenshot 2026-04-02 at 11.28.37Screenshot 2026-04-02 at 11.28.37https://www.threatfabric.com/hubfs/TF_MalwareGap4.jpgTF_MalwareGap4TF_MalwareGap4https://www.threatfabric.com/hubfs/TF_MalwareGap5.jpgTF_MalwareGap5TF_MalwareGap52026-07-01https://www.threatfabric.com/blogs/ginp_a_malware_patchwork_borrowing_from_anubishttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/santander-overlays.webpsantander-overlayssantander-overlayshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/accesibility.pngaccesibilityaccesibilityhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/receivers.pngreceiversreceivershttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/overlays1.webpoverlays1overlays1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/overlays2.webpoverlays2overlays2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/generic-grabber.webpgeneric-grabbergeneric-grabberhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/overlays4.webpoverlays4overlays4https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/overlays3.webpoverlays3overlays3https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ginp-malware/startwhilerequest.webpstartwhilerequeststartwhilerequest2023-05-23https://www.threatfabric.com/blogs/lightspy-implant-for-macoshttps://www.threatfabric.com/hubfs/macimplant1.pngmacimplant1macimplant1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2014.05.26.pngScreenshot 2024-04-22 at 14.05.26Screenshot 2024-04-22 at 14.05.26https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-16%20at%2016.54.53.pngScreenshot 2024-04-16 at 16.54.53Screenshot 2024-04-16 at 16.54.53https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2014.45.55.pngScreenshot 2024-04-15 at 14.45.55Screenshot 2024-04-15 at 14.45.55https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-05-01%20at%2017.47.58.pngScreenshot 2024-05-01 at 17.47.58Screenshot 2024-05-01 at 17.47.58https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2014.48.10.pngScreenshot 2024-04-15 at 14.48.10Screenshot 2024-04-15 at 14.48.10https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2011.49.41.pngScreenshot 2024-04-22 at 11.49.41Screenshot 2024-04-22 at 11.49.41https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2011.57.23.pngScreenshot 2024-04-22 at 11.57.23Screenshot 2024-04-22 at 11.57.23https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2014.12.56.pngScreenshot 2024-04-15 at 14.12.56Screenshot 2024-04-15 at 14.12.56https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/2.bmp22https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/xordecode.pngxordecodexordecodehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-09%20at%2011.32.00.pngScreenshot 2024-04-09 at 11.32.00Screenshot 2024-04-09 at 11.32.00https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2015.20.04.pngScreenshot 2024-04-15 at 15.20.04Screenshot 2024-04-15 at 15.20.04https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2012.57.12.pngScreenshot 2024-04-15 at 12.57.12Screenshot 2024-04-15 at 12.57.12https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-05-01%20at%2012.17.21.pngScreenshot 2024-05-01 at 12.17.21Screenshot 2024-05-01 at 12.17.21https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/bashscript.pngbashscriptbashscripthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2017.45.42.pngScreenshot 2024-04-15 at 17.45.42Screenshot 2024-04-15 at 17.45.42https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-09%20at%2011.13.01.pngScreenshot 2024-04-09 at 11.13.01Screenshot 2024-04-09 at 11.13.01https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-17%20at%2014.07.16.pngScreenshot 2024-04-17 at 14.07.16Screenshot 2024-04-17 at 14.07.16https://www.threatfabric.com/hubfs/weblogs.pngweblogsweblogshttps://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bc.jpgharry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bcharry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bchttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2010.37.10.pngScreenshot 2024-04-15 at 10.37.10Screenshot 2024-04-15 at 10.37.10https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-17%20at%2016.08.19.pngScreenshot 2024-04-17 at 16.08.19Screenshot 2024-04-17 at 16.08.19https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-05-01%20at%2012.06.51.pngScreenshot 2024-05-01 at 12.06.51Screenshot 2024-05-01 at 12.06.51https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/victims.pngvictimsvictimshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2015.12.50.pngScreenshot 2024-04-15 at 15.12.50Screenshot 2024-04-15 at 15.12.50https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2010.34.32.pngScreenshot 2024-04-22 at 10.34.32Screenshot 2024-04-22 at 10.34.32https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2017.52.34.pngScreenshot 2024-04-15 at 17.52.34Screenshot 2024-04-15 at 17.52.34https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-17%20at%2014.46.59.pngScreenshot 2024-04-17 at 14.46.59Screenshot 2024-04-17 at 14.46.59https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-22%20at%2012.01.45.pngScreenshot 2024-04-22 at 12.01.45Screenshot 2024-04-22 at 12.01.45https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpymacOS/Screenshot%202024-04-15%20at%2015.22.19.pngScreenshot 2024-04-15 at 15.22.19Screenshot 2024-04-15 at 15.22.192024-05-30https://www.threatfabric.com/jobs/mobile-malware-analysthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-05-18https://www.threatfabric.com/blogs/fusion-fireside-6-navigating-fraud-trends-with-freddy-arthur-from-nice-actimizehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_FreddyArthur.pngTF_FusionFireside_FreddyArthurTF_FusionFireside_FreddyArthurhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2024-12-12https://www.threatfabric.com/blogs/the-trojan-horse-that-wanted-to-fly-rocinantehttps://www.threatfabric.com/hubfs/1.png11https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ermac.pngermacermachttps://www.threatfabric.com/hubfs/capabilities.pngcapabilitiescapabilitieshttps://www.threatfabric.com/hubfs/aaaaaaa.pngaaaaaaaaaaaaaahttps://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_Rocinante_trojan_horse_with_wi_e5df5bee-17f2-4b62-a14c-776da7c6a06f.jpgharry_tf_miyazaki_style_image_of_Rocinante_trojan_horse_with_wi_e5df5bee-17f2-4b62-a14c-776da7c6a06fharry_tf_miyazaki_style_image_of_Rocinante_trojan_horse_with_wi_e5df5bee-17f2-4b62-a14c-776da7c6a06fhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_2024_Q2_Threat_Briefing_Akbank.pngTF_2024_Q2_Threat_Briefing_AkbankTF_2024_Q2_Threat_Briefing_Akbankhttps://www.threatfabric.com/hubfs/targets-1.pngtargets-1targets-12024-08-28https://www.threatfabric.com/blogs/brata-a-tale-of-three-familieshttps://www.threatfabric.com/hubfs/Threatfabric/images/tale.pngtaletalehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/brata.pngbratabratahttps://www.threatfabric.com/hubfs/Threatfabric/images/amex_rental.pngamex_rentalamex_rentalhttps://www.threatfabric.com/hubfs/Threatfabric/images/cover-2.jpgcover-2cover-2https://www.threatfabric.com/hubfs/Threatfabric/images/b4a.pngb4ab4ahttps://www.threatfabric.com/hubfs/Threatfabric/images/amex_targets.pngamex_targetsamex_targetshttps://www.threatfabric.com/hubfs/Threatfabric/images/copybara-1.pngcopybara-1copybara-1https://www.threatfabric.com/hubfs/Threatfabric/images/amextroll.pngamextrollamextrollhttps://www.threatfabric.com/hubfs/Threatfabric/images/voice.pngvoicevoicehttps://www.threatfabric.com/hubfs/Threatfabric/images/copybara_overlay-1.pngcopybara_overlay-1copybara_overlay-1https://www.threatfabric.com/hubfs/Threatfabric/images/screenshot.pngscreenshotscreenshot2023-06-27https://www.threatfabric.com/blogs/the-attack-of-the-droppershttps://www.threatfabric.com/hubfs/Threatfabric/images/capabilities%20(1).pngcapabilities (1)capabilities (1)https://www.threatfabric.com/hubfs/Threatfabric/images/a11y.pnga11ya11yhttps://www.threatfabric.com/hubfs/Threatfabric/images/sharkbot_dropper_2.pngsharkbot_dropper_2sharkbot_dropper_2https://www.threatfabric.com/hubfs/Threatfabric/images/installation.jpginstallationinstallationhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/evolution-1.pngevolution-1evolution-1https://www.threatfabric.com/hubfs/Threatfabric/images/droppers.pngdroppersdroppershttps://www.threatfabric.com/hubfs/Threatfabric/images/cover%20(1).pngcover (1)cover (1)https://www.threatfabric.com/hubfs/Threatfabric/images/distribution.pngdistributiondistributionhttps://www.threatfabric.com/hubfs/Threatfabric/images/sharkbot_dropper.pngsharkbot_droppersharkbot_dropperhttps://www.threatfabric.com/hubfs/Threatfabric/images/fake_update.pngfake_updatefake_updatehttps://www.threatfabric.com/hubfs/Threatfabric/images/strings.pngstringsstringshttps://www.threatfabric.com/hubfs/Threatfabric/images/requests.pngrequestsrequestshttps://www.threatfabric.com/hubfs/Threatfabric/images/permissions.pngpermissionspermissionshttps://www.threatfabric.com/hubfs/40185.png40185401852023-06-16https://www.threatfabric.com/newshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/Threatfabric/images/hacker.pnghackerhacker2024-06-17https://www.threatfabric.com/resources/voice-phishing-using-rathttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/lokibot_the_first_hybrid_android_malwarehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_automatic_ransomware_activation_when_disabling_device_admin_code_snippet.webplokibot_the_first_hybrid_android_malware_automatic_ransomware_activation_when_disabling_device_admin_code_snippetlokibot_the_first_hybrid_android_malware_automatic_ransomware_activation_when_disabling_device_admin_code_snippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_hardcoded_bitcoin_address_code_snippet.webplokibot_the_first_hybrid_android_malware_hardcoded_bitcoin_address_code_snippetlokibot_the_first_hybrid_android_malware_hardcoded_bitcoin_address_code_snippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_screen_shown_when_the_ransomware_locks_the_phone.webplokibot_the_first_hybrid_android_malware_screen_shown_when_the_ransomware_locks_the_phonelokibot_the_first_hybrid_android_malware_screen_shown_when_the_ransomware_locks_the_phonehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_malware_command_and_control_panel.pnglokibot_the_first_hybrid_android_malware_malware_command_and_control_panellokibot_the_first_hybrid_android_malware_malware_command_and_control_panelhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/lokibot/lokibot_the_first_hybrid_android_malware_bitcoin_wallet_details.pnglokibot_the_first_hybrid_android_malware_bitcoin_wallet_detailslokibot_the_first_hybrid_android_malware_bitcoin_wallet_details2023-06-16https://www.threatfabric.com/blogs/pig-butchering-vs-cyber-fraud-kill-chainhttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_PigButchering_FeaturedImage.jpgTF_CyberfraudKillchain_PigButchering_FeaturedImageTF_CyberfraudKillchain_PigButchering_FeaturedImagehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.04.pngScreenshot 2024-03-04 at 08.52.04Screenshot 2024-03-04 at 08.52.04https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_PigButchering_Details.jpgTF_CyberfraudKillchain_PigButchering_DetailsTF_CyberfraudKillchain_PigButchering_Detailshttps://www.threatfabric.com/hubfs/Screenshot%202024-06-11%20at%2015.14.32.pngScreenshot 2024-06-11 at 15.14.32Screenshot 2024-06-11 at 15.14.32https://www.threatfabric.com/hubfs/40185.png40185401852024-06-12https://www.threatfabric.com/blogs/threatfabric-has-extended-its-fraud-risk-suite-with-advanced-behavioural-analyticshttps://www.threatfabric.com/hubfs/Threatfabric/images/ca_ba_threatfabric.pngca_ba_threatfabricca_ba_threatfabrichttps://www.threatfabric.com/hubfs/Threatfabric/images/TF_CORE_STORY_2022_CHS_v1.3.024.jpegTF_CORE_STORY_2022_CHS_v1.3.024TF_CORE_STORY_2022_CHS_v1.3.024https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/TF_CORE_STORY_2022_CHS_v1.3.023.jpegTF_CORE_STORY_2022_CHS_v1.3.023TF_CORE_STORY_2022_CHS_v1.3.023https://www.threatfabric.com/hubfs/Threatfabric/images/TF_CORE_STORY_2022_CHS_v1.3.025.jpegTF_CORE_STORY_2022_CHS_v1.3.025TF_CORE_STORY_2022_CHS_v1.3.025https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/tf_blog_ba.jpgtf_blog_batf_blog_ba2023-03-03https://www.threatfabric.com/resourceshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-06-12https://www.threatfabric.com/blogs/mobile-banking-malware-vs-fraud-kill-chainhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_MobileBankingMalware_Details.pngTF_CyberfraudKillchain_MobileBankingMalware_DetailsTF_CyberfraudKillchain_MobileBankingMalware_Detailshttps://www.threatfabric.com/hubfs/Screenshot%202024-02-26%20at%2015.43.42.pngScreenshot 2024-02-26 at 15.43.42Screenshot 2024-02-26 at 15.43.42https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_MobileBankingMalware.pngTF_CyberfraudKillchain_MobileBankingMalwareTF_CyberfraudKillchain_MobileBankingMalwarehttps://www.threatfabric.com/hubfs/Screenshot%202024-02-26%20at%2015.43.58.pngScreenshot 2024-02-26 at 15.43.58Screenshot 2024-02-26 at 15.43.582024-02-28https://www.threatfabric.com/resources/mobile-banking-trojans-abuse-android-binaryxml-format-to-avoid-detectionhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-08-24https://www.threatfabric.com/blogs/massiv-when-your-iptv-app-terminates-your-savingshttps://www.threatfabric.com/hubfs/Slide3-Feb-18-2026-10-26-57-0185-AM.pngSlide3-Feb-18-2026-10-26-57-0185-AMSlide3-Feb-18-2026-10-26-57-0185-AMhttps://www.threatfabric.com/hubfs/code.pngcodecodehttps://www.threatfabric.com/hubfs/Slide2-Feb-18-2026-10-26-57-0045-AM.pngSlide2-Feb-18-2026-10-26-57-0045-AMSlide2-Feb-18-2026-10-26-57-0045-AMhttps://www.threatfabric.com/hubfs/Slide1-Feb-18-2026-10-26-56-8271-AM.pngSlide1-Feb-18-2026-10-26-56-8271-AMSlide1-Feb-18-2026-10-26-56-8271-AMhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide4-Feb-18-2026-10-26-56-9225-AM.pngSlide4-Feb-18-2026-10-26-56-9225-AMSlide4-Feb-18-2026-10-26-56-9225-AMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_IPTV4.jpgTF_IPTV4TF_IPTV42026-02-19https://www.threatfabric.com/scam-prevention-in-turkey-with-behavioural-analyticshttps://www.threatfabric.com/hubfs/Screenshot%202024-12-10%20at%2015.27.42.pngScreenshot20241210at152742Screenshot20241210at152742https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/ScamCreature.jpgScamCreatureScamCreaturehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/synergy.pngsynergysynergyhttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard12026-03-16https://www.threatfabric.com/blogs/smishing-campaign-in-nl-spreading-cabassous-and-anatsahttps://www.threatfabric.com/hubfs/Threatfabric/images/overlay_2.pngoverlay_2overlay_2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/smishing/ups_fake_page_uk.pngups_fake_page_ukups_fake_page_ukhttps://www.threatfabric.com/hubfs/Threatfabric/images/overlay_1.pngoverlay_1overlay_1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/smishing/ups_fake_page_nl.pngups_fake_page_nlups_fake_page_nlhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/smishing/tweet.pngtweettweethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/smishing/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2023-06-27https://www.threatfabric.com/blogs/xenomorphhttps://www.threatfabric.com/hubfs/Slide6.pngSlide6Slide6https://www.threatfabric.com/hubfs/TF_Bull.jpgTF_BullTF_Bullhttps://www.threatfabric.com/hubfs/Slide7.pngSlide7Slide7https://www.threatfabric.com/hubfs/Slide3-3.pngSlide3-3Slide3-3https://www.threatfabric.com/hubfs/Slide4-1.pngSlide4-1Slide4-1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide5-2.pngSlide5-2Slide5-2https://www.threatfabric.com/hubfs/Slide4-2.pngSlide4-2Slide4-2https://www.threatfabric.com/hubfs/Slide3-1.pngSlide3-1Slide3-1https://www.threatfabric.com/hubfs/Slide5-1.pngSlide5-1Slide5-1https://www.threatfabric.com/hubfs/Slide1-1.pngSlide1-1Slide1-1https://www.threatfabric.com/hubfs/Slide2-1.pngSlide2-1Slide2-1https://www.threatfabric.com/hubfs/Slide6-1.pngSlide6-1Slide6-12023-11-07https://www.threatfabric.com/blogs/threatfabric-appoints-jacqueline-nijzink-as-chief-operating-officerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(74).pngMicrosoftTeams-image (74)MicrosoftTeams-image (74)2023-11-09https://www.threatfabric.com/blogs/fusion-fireside-11-from-compliance-to-collaboration-with-keith-grosshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGross.jpgTF_FusionFireside_KeithGrossTF_FusionFireside_KeithGross2025-06-17https://www.threatfabric.com/blogs/bankbot_dropper_hiding_on_google_playhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bankbot-dropper/bankbot_dropper_hiding_on_google_play_flow.mp4/medium.jpgDemonstration video of the threatDemonstration video of the threathttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bankbot-dropper/bankbot_dropper_hiding_on_google_play_flow.mp414nonohttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_accessibility_service_enabled.webpbankbot_dropper_hiding_on_google_play_accessibility_service_enabledbankbot_dropper_hiding_on_google_play_accessibility_service_enabledhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_bubble_shooter_wild_life.webpbankbot_dropper_hiding_on_google_play_bubble_shooter_wild_lifebankbot_dropper_hiding_on_google_play_bubble_shooter_wild_lifehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_dropper_installs_apk_from_sdcard.webpbankbot_dropper_hiding_on_google_play_dropper_installs_apk_from_sdcardbankbot_dropper_hiding_on_google_play_dropper_installs_apk_from_sdcardhttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_bubble_shooter_wild_life_additional_information.webpbankbot_dropper_hiding_on_google_play_bubble_shooter_wild_life_additional_informationbankbot_dropper_hiding_on_google_play_bubble_shooter_wild_life_additional_informationhttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_permission_request_to_draw_over_apps.webpbankbot_dropper_hiding_on_google_play_permission_request_to_draw_over_appsbankbot_dropper_hiding_on_google_play_permission_request_to_draw_over_appshttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_earn_real_money_gift_cards_additional_information.webpbankbot_dropper_hiding_on_google_play_earn_real_money_gift_cards_additional_informationbankbot_dropper_hiding_on_google_play_earn_real_money_gift_cards_additional_informationhttps://www.threatfabric.com/hubfs/bankbot_dropper_hiding_on_google_play_earn_real_money_gift_cards.webpbankbot_dropper_hiding_on_google_play_earn_real_money_gift_cardsbankbot_dropper_hiding_on_google_play_earn_real_money_gift_cards2025-06-18https://www.threatfabric.com/blogs/threatfabric-secures-strategic-investment-from-onespan-to-accelerate-global-fraud-and-scam-preventionhttps://www.threatfabric.com/hubfs/TF_PressRelease_Onespan2.jpgTF_PressRelease_Onespan2TF_PressRelease_Onespan2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852025-10-06https://www.threatfabric.com/blogshttps://www.threatfabric.com/hubfs/TF_HologramLaptop_16-9%20(1).pngTF_HologramLaptop_16-9 (1)TF_HologramLaptop_16-9 (1)https://www.threatfabric.com/hubfs/Threatfabric/images/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/harry_tf_money_coins_in_well_miyazaki_style_drawing_of_water_we_0237f000-5c27-4a04-bb8c-864f66d32459.jpgharry_tf_money_coins_in_well_miyazaki_style_drawing_of_water_we_0237f000-5c27-4a04-bb8c-864f66d32459harry_tf_money_coins_in_well_miyazaki_style_drawing_of_water_we_0237f000-5c27-4a04-bb8c-864f66d32459https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_RomanceFraud_FeaturedImage.pngTF_CyberfraudKillchain_RomanceFraud_FeaturedImageTF_CyberfraudKillchain_RomanceFraud_FeaturedImagehttps://www.threatfabric.com/hubfs/InvestmentFraud_FeaturedImage@2x-1.pngInvestmentFraud_FeaturedImage@2x-1InvestmentFraud_FeaturedImage@2x-1https://www.threatfabric.com/hubfs/TF_Gartner_January2024.pngTF_Gartner_January2024TF_Gartner_January2024https://www.threatfabric.com/hubfs/TF_SecuriDropper_Social.jpgTF_SecuriDropper_SocialTF_SecuriDropper_Socialhttps://www.threatfabric.com/hubfs/TF_FusionFireside_JohnFokker.jpgTF_FusionFireside_JohnFokkerTF_FusionFireside_JohnFokkerhttps://www.threatfabric.com/hubfs/TF_Anatsa_BlogUSA.jpgTF_Anatsa_BlogUSATF_Anatsa_BlogUSAhttps://www.threatfabric.com/hubfs/TF_GhostTap_LOGO.jpgTF_GhostTap_LOGOTF_GhostTap_LOGOhttps://www.threatfabric.com/hubfs/MTI_Perseus.jpgMTI_PerseusMTI_Perseushttps://www.threatfabric.com/hubfs/TF_FraudTrends2026_CLEAN2.jpgTF_FraudTrends2026_CLEAN2TF_FraudTrends2026_CLEAN2https://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(113).pngMicrosoftTeams-image (113)MicrosoftTeams-image (113)https://www.threatfabric.com/hubfs/TF_Team_Eward.jpgTF_Team_EwardTF_Team_Ewardhttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(74).pngMicrosoftTeams-image (74)MicrosoftTeams-image (74)https://www.threatfabric.com/hubfs/TF_Bull.jpgTF_BullTF_Bullhttps://www.threatfabric.com/hubfs/TF_Blog_Piracy_SOCIAL.jpgTF_Blog_Piracy_SOCIALTF_Blog_Piracy_SOCIALhttps://www.threatfabric.com/hubfs/TF%20x%20Trapets%20Design%20Logo.pngTF x Trapets Design LogoTF x Trapets Design Logohttps://www.threatfabric.com/hubfs/TF_LightSpy-1.jpgTF_LightSpy-1TF_LightSpy-1https://www.threatfabric.com/hubfs/TF_FusionFireside_MortenTandle.jpgTF_FusionFireside_MortenTandleTF_FusionFireside_MortenTandlehttps://www.threatfabric.com/hubfs/Threatfabric/images/tf_core_story_2022_chs_v1.6.025.jpegtf_core_story_2022_chs_v1.6.025tf_core_story_2022_chs_v1.6.025https://www.threatfabric.com/hubfs/harry_tf_researcher_sitting_behind_desk_in_front_of_giant_glass_b54cab5e-4166-4c7e-9757-1aa42d2fe360.jpgharry_tf_researcher_sitting_behind_desk_in_front_of_giant_glass_b54cab5e-4166-4c7e-9757-1aa42d2fe360harry_tf_researcher_sitting_behind_desk_in_front_of_giant_glass_b54cab5e-4166-4c7e-9757-1aa42d2fe360https://www.threatfabric.com/hubfs/MTI_TrickMo2.jpgMTI_TrickMo2MTI_TrickMo2https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_MobileBankingMalware.pngTF_CyberfraudKillchain_MobileBankingMalwareTF_CyberfraudKillchain_MobileBankingMalwarehttps://www.threatfabric.com/hubfs/TF_GoogleStreet.jpgTF_GoogleStreetTF_GoogleStreethttps://www.threatfabric.com/hubfs/TF_RaboInvestments_SOCIAL%201.pngTF_RaboInvestments_SOCIAL 1TF_RaboInvestments_SOCIAL 1https://www.threatfabric.com/hubfs/TF_KenPalla_ClarityOnAustralianScamRegulations_SOCIAL.jpgTF_KenPalla_ClarityOnAustralianScamRegulations_SOCIALTF_KenPalla_ClarityOnAustralianScamRegulations_SOCIALhttps://www.threatfabric.com/hubfs/image%20(2).pngimage (2)image (2)https://www.threatfabric.com/hubfs/Threatfabric/images/brasdex-cover-minified.pngbrasdex-cover-minifiedbrasdex-cover-minifiedhttps://www.threatfabric.com/hubfs/TF_Team_Emma.jpgTF_Team_EmmaTF_Team_Emmahttps://www.threatfabric.com/hubfs/TF_FusionFireside_SenanMoloney.jpgTF_FusionFireside_SenanMoloneyTF_FusionFireside_SenanMoloneyhttps://www.threatfabric.com/hubfs/TF_HyenaHologram.jpgTF_HyenaHologramTF_HyenaHologramhttps://www.threatfabric.com/hubfs/APP%20Fraud%20Reimbursement%20in%20the%20UK.pngAPP Fraud Reimbursement in the UKAPP Fraud Reimbursement in the UKhttps://www.threatfabric.com/hubfs/TF_Datzbro.jpgTF_DatzbroTF_Datzbrohttps://www.threatfabric.com/hubfs/TF_IPTV4.jpgTF_IPTV4TF_IPTV4https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_JakeNorwood.jpgTF_FusionFireside_JakeNorwoodTF_FusionFireside_JakeNorwoodhttps://www.threatfabric.com/hubfs/TF_FusionFireside_HakonAkerlund.jpgTF_FusionFireside_HakonAkerlundTF_FusionFireside_HakonAkerlundhttps://www.threatfabric.com/hubfs/ShiftLeftOnFraud_FeaturedImage2.jpgShiftLeftOnFraud_FeaturedImage2ShiftLeftOnFraud_FeaturedImage2https://www.threatfabric.com/hubfs/TF_Team_Maurits.pngTF_Team_MauritsTF_Team_Mauritshttps://www.threatfabric.com/hubfs/Inform_PartnershipAnnouncement_SOCIAL.jpgInform_PartnershipAnnouncement_SOCIALInform_PartnershipAnnouncement_SOCIALhttps://www.threatfabric.com/hubfs/Threatfabric/images/spyware.pngspywarespywarehttps://www.threatfabric.com/hubfs/TF_FusionFireside_DaveLaramy%201-1.jpgTF_FusionFireside_DaveLaramy 1-1TF_FusionFireside_DaveLaramy 1-1https://www.threatfabric.com/hubfs/TF_FusionFireside_CraigRice.pngTF_FusionFireside_CraigRiceTF_FusionFireside_CraigRicehttps://www.threatfabric.com/hubfs/TF_FusionFireside_GaryWarner.jpgTF_FusionFireside_GaryWarnerTF_FusionFireside_GaryWarnerhttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(38).pngMicrosoftTeams-image (38)MicrosoftTeams-image (38)https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_PigButchering_FeaturedImage.jpgTF_CyberfraudKillchain_PigButchering_FeaturedImageTF_CyberfraudKillchain_PigButchering_FeaturedImagehttps://www.threatfabric.com/hubfs/Threatfabric/images/blogpost-placeholder.pngblogpost-placeholderblogpost-placeholderhttps://www.threatfabric.com/hubfs/Threatfabric/images/cover%20(1)-1.pngcover (1)-1cover (1)-1https://www.threatfabric.com/hubfs/MTI_Blog_Sturnus3.jpgMTI_Blog_Sturnus3MTI_Blog_Sturnus3https://www.threatfabric.com/hubfs/TF_Blog_Letscall.jpgTF_Blog_LetscallTF_Blog_Letscallhttps://www.threatfabric.com/hubfs/PSR_Social1.jpgPSR_Social1PSR_Social1https://www.threatfabric.com/hubfs/TF_Blog_FrontDoor.jpgTF_Blog_FrontDoorTF_Blog_FrontDoorhttps://www.threatfabric.com/hubfs/cover-3.pngcover-3cover-3https://www.threatfabric.com/hubfs/MTI_Blog_Herodotus2.jpgMTI_Blog_Herodotus2MTI_Blog_Herodotus2https://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGordon.jpgTF_FusionFireside_KeithGordonTF_FusionFireside_KeithGordonhttps://www.threatfabric.com/hubfs/Andy%20Chandler.pngAndy ChandlerAndy Chandlerhttps://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_Rocinante_trojan_horse_with_wi_e5df5bee-17f2-4b62-a14c-776da7c6a06f.jpgharry_tf_miyazaki_style_image_of_Rocinante_trojan_horse_with_wi_e5df5bee-17f2-4b62-a14c-776da7c6a06fharry_tf_miyazaki_style_image_of_Rocinante_trojan_horse_with_wi_e5df5bee-17f2-4b62-a14c-776da7c6a06fhttps://www.threatfabric.com/hubfs/TF_FusionFireside_ChrisBone.jpgTF_FusionFireside_ChrisBoneTF_FusionFireside_ChrisBonehttps://www.threatfabric.com/hubfs/TF_Chameleon_2024.jpgTF_Chameleon_2024TF_Chameleon_2024https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/20240924_Blog.jpg20240924_Blog20240924_Bloghttps://www.threatfabric.com/hubfs/TF_Patent2.jpgTF_Patent2TF_Patent2https://www.threatfabric.com/hubfs/Threatfabric/images/cover.jpgcovercoverhttps://www.threatfabric.com/hubfs/TF_Chameleon.jpgTF_ChameleonTF_Chameleonhttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207%20-%20Behavioral%20Analytics_MobileMalware-1.jpgLightning Campaign 7 - Behavioral Analytics_MobileMalware-1Lightning Campaign 7 - Behavioral Analytics_MobileMalware-1https://www.threatfabric.com/hubfs/TF_LightSpyiOS.jpgTF_LightSpyiOSTF_LightSpyiOShttps://www.threatfabric.com/hubfs/TF_Blog_Crocodilus.jpgTF_Blog_CrocodilusTF_Blog_Crocodilushttps://www.threatfabric.com/hubfs/TF_FusionFireside_AntonJanCozijnsen.jpgTF_FusionFireside_AntonJanCozijnsenTF_FusionFireside_AntonJanCozijnsenhttps://www.threatfabric.com/hubfs/TF_Soccer_Other.jpgTF_Soccer_OtherTF_Soccer_Otherhttps://www.threatfabric.com/hubfs/TF_PressRelease_Onespan2.jpgTF_PressRelease_Onespan2TF_PressRelease_Onespan2https://www.threatfabric.com/hubfs/Threatfabric/images/cover-1.jpgcover-1cover-1https://www.threatfabric.com/hubfs/TF_TechRequirements.jpgTF_TechRequirementsTF_TechRequirementshttps://www.threatfabric.com/hubfs/TF_FusionFireside_FreddyArthur.pngTF_FusionFireside_FreddyArthurTF_FusionFireside_FreddyArthurhttps://www.threatfabric.com/hubfs/Threatfabric/images/cover%20(1).pngcover (1)cover (1)https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard.pngThreatFabric_SocialCardThreatFabric_SocialCardhttps://www.threatfabric.com/hubfs/TF_FusionFireside_NeilGiles.jpgTF_FusionFireside_NeilGilesTF_FusionFireside_NeilGileshttps://www.threatfabric.com/hubfs/Threatfabric/images/tf_blog_ba.jpgtf_blog_batf_blog_bahttps://www.threatfabric.com/hubfs/social-suggested-images/TF_AndroidDroppers2.jpgTF_AndroidDroppers2TF_AndroidDroppers2https://www.threatfabric.com/hubfs/TF_FusionFireside_FrederikMennes.jpgTF_FusionFireside_FrederikMennesTF_FusionFireside_FrederikMenneshttps://www.threatfabric.com/hubfs/TF_Anatsa_Blog2.pngTF_Anatsa_Blog2TF_Anatsa_Blog2https://www.threatfabric.com/hubfs/TF_Octo2.jpgTF_Octo2TF_Octo2https://www.threatfabric.com/hubfs/TF_MalwareGap4.jpgTF_MalwareGap4TF_MalwareGap4https://www.threatfabric.com/hubfs/Lightning%20Campaign%207.2%20-%20Behavioral%20Analytics_Privacy.jpgLightning Campaign 7.2 - Behavioral Analytics_PrivacyLightning Campaign 7.2 - Behavioral Analytics_Privacyhttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207.1%20-%20Behavioral%20Analytics_Scams.jpgLightning Campaign 7.1 - Behavioral Analytics_ScamsLightning Campaign 7.1 - Behavioral Analytics_Scamshttps://www.threatfabric.com/hubfs/TF_MTI_PhantomCard.jpgTF_MTI_PhantomCardTF_MTI_PhantomCardhttps://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bc.jpgharry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bcharry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bchttps://www.threatfabric.com/hubfs/cover-2.pngcover-2cover-2https://www.threatfabric.com/hubfs/TF_FusionFireside_Announcement3.pngTF_FusionFireside_Announcement3TF_FusionFireside_Announcement3https://www.threatfabric.com/hubfs/TF_LightningWebinars_Blog.jpgTF_LightningWebinars_BlogTF_LightningWebinars_Bloghttps://www.threatfabric.com/hubfs/TF_FusionFireside_PatrickBours.jpgTF_FusionFireside_PatrickBoursTF_FusionFireside_PatrickBourshttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_VishingRATFraud_FeaturedImage.pngTF_CyberfraudKillchain_VishingRATFraud_FeaturedImageTF_CyberfraudKillchain_VishingRATFraud_FeaturedImagehttps://www.threatfabric.com/hubfs/Threatfabric/images/cover-2.jpgcover-2cover-2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/investment-announcement/invesmentanouncement.pnginvesmentanouncementinvesmentanouncementhttps://www.threatfabric.com/hubfs/TF_FusionFireside_TeresaWalsh.pngTF_FusionFireside_TeresaWalshTF_FusionFireside_TeresaWalshhttps://www.threatfabric.com/hubfs/PR-Threat-fabric-1-1.jpgPR-Threat-fabric-1-1PR-Threat-fabric-1-1https://www.threatfabric.com/hubfs/TF_MTI_RatOn-01.jpgTF_MTI_RatOn-01TF_MTI_RatOn-01https://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGross.jpgTF_FusionFireside_KeithGrossTF_FusionFireside_KeithGrosshttps://www.threatfabric.com/hubfs/TF_FusionFireside_BeckyHolmes.jpgTF_FusionFireside_BeckyHolmesTF_FusionFireside_BeckyHolmes2024-09-03https://www.threatfabric.com/blogs/the-top-5-technology-requirements-for-fraud-prevention-in-financial-serviceshttps://www.threatfabric.com/hubfs/TF_TechRequirements.jpgTF_TechRequirementsTF_TechRequirementshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852025-11-06https://www.threatfabric.com/resources/account-takeover-ato-fraudhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/xenomorph-a-newly-hatched-banking-trojanhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/gp_dropper.webpgp_droppergp_dropperhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/overlays.webpoverlaysoverlayshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/ring0.webpring0ring0https://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/features.webpfeaturesfeatureshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/code_reuse.webpcode_reusecode_reusehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenamorph/a11y.webpa11ya11yhttps://www.threatfabric.com/hubfs/40185.png40185401852023-06-27https://www.threatfabric.com/blogs/threatfabric-investment-announcementhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/investment-announcement/investmentannoncement-detail.pnginvestmentannoncement-detailinvestmentannoncement-detailhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/investment-announcement/invesmentanouncement.pnginvesmentanouncementinvesmentanouncement2023-06-16https://www.threatfabric.com/blogs/threatfabric-partnership-announcement-trapetshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF%20x%20Trapets%20Design%20Logo.pngTF x Trapets Design LogoTF x Trapets Design Logo2023-06-16https://www.threatfabric.com/blogs/partners-in-crime-medusa-cabassoushttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/recent_campaigns.webprecent_campaignsrecent_campaignshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/capabilities.webpcapabilitiescapabilitieshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/configs_flu.webpconfigs_fluconfigs_fluhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/side_by_side_mti.webpside_by_side_mtiside_by_side_mtihttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/semi.ats.webpsemi.atssemi.atshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/control_input_field.webpcontrol_input_fieldcontrol_input_fieldhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/partners-in-crime/direct_reply.webpdirect_replydirect_reply2023-06-16https://www.threatfabric.com/resources/impersonation-scam-protectionhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(45).pngMicrosoftTeamsimage45MicrosoftTeamsimage45https://www.threatfabric.com/hubfs/40185.png40185401852023-11-07https://www.threatfabric.com/blogs/own-goal-piracy-as-an-attack-vector-to-target-football-fanshttps://www.threatfabric.com/hubfs/PictureHook.pngPictureHookPictureHookhttps://www.threatfabric.com/hubfs/image-png-Jun-01-2026-01-09-49-8263-PM.pngimage-png-Jun-01-2026-01-09-49-8263-PMimage-png-Jun-01-2026-01-09-49-8263-PMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/undefined-Jun-01-2026-12-34-43-5746-PM.pngundefined-Jun-01-2026-12-34-43-5746-PMundefined-Jun-01-2026-12-34-43-5746-PMhttps://www.threatfabric.com/hubfs/TF_Blog_Piracy_SOCIAL.jpgTF_Blog_Piracy_SOCIALTF_Blog_Piracy_SOCIALhttps://www.threatfabric.com/hubfs/undefined-Jun-01-2026-12-34-31-6370-PM.pngundefined-Jun-01-2026-12-34-31-6370-PMundefined-Jun-01-2026-12-34-31-6370-PMhttps://www.threatfabric.com/hubfs/Picture%202.pngPicture 2Picture 2https://www.threatfabric.com/hubfs/image-png-Jun-01-2026-01-09-12-8584-PM.pngimage-png-Jun-01-2026-01-09-12-8584-PMimage-png-Jun-01-2026-01-09-12-8584-PMhttps://www.threatfabric.com/hubfs/Picture%201-4.pngPicture 1-4Picture 1-42026-06-04https://www.threatfabric.com/frshttps://www.threatfabric.com/hubfs/Screenshot%202024-12-10%20at%2015.27.42.pngScreenshot20241210at152742Screenshot20241210at152742https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/harry_tf_miyazaki_style_image_of_jellyfish_playing_tug-of-war_w_00f220c1-9dd8-44e8-9367-e3e18b0485bc-1.jpgharrytfmiyazakistyleimageofjellyfishplayingtugofwarw00f220c19dd844e89367e3e18b0485bc1harrytfmiyazakistyleimageofjellyfishplayingtugofwarw00f220c19dd844e89367e3e18b0485bc1https://www.threatfabric.com/hubfs/synergy.pngsynergysynergy2026-03-16https://www.threatfabric.com/blogs/behavioural-modelling-and-the-future-of-fraud-prevention-with-patrick-bourshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_PatrickBours.jpgTF_FusionFireside_PatrickBoursTF_FusionFireside_PatrickBours2025-09-25https://www.threatfabric.com/jobs/back-end-java-engineerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852024-09-09https://www.threatfabric.com/blogs/epic-versus-google-what-about-mobile-malwarehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/anatsa_droppers_timeline.pnganatsa_droppers_timelineanatsa_droppers_timelinehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_GoogleStreet.jpgTF_GoogleStreetTF_GoogleStreet2024-10-21https://www.threatfabric.com/beating-rats-with-frs-device-riskhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/Screenshot%202024-12-10%20at%2015.27.42.pngScreenshot20241210at152742Screenshot20241210at152742https://www.threatfabric.com/hubfs/synergy.pngsynergysynergyhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/BelgiumBubble.jpgBelgiumBubbleBelgiumBubble2026-03-16https://www.threatfabric.com/blogs/lightspy-mapt-mobile-payment-system-attackhttps://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2011.06.39.pngScreenshot 2023-09-07 at 11.06.39Screenshot 2023-09-07 at 11.06.39https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2015.35.18.pngScreenshot 2023-09-07 at 15.35.18Screenshot 2023-09-07 at 15.35.18https://www.threatfabric.com/hubfs/Screenshot%202023-09-15%20at%2012.52.02.pngScreenshot 2023-09-15 at 12.52.02Screenshot 2023-09-15 at 12.52.02https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Screenshot%202023-08-18%20at%2010.45.41%20copy.pngScreenshot 2023-08-18 at 10.45.41 copyScreenshot 2023-08-18 at 10.45.41 copyhttps://www.threatfabric.com/hubfs/Screenshot%202023-08-25%20at%2016.37.39.pngScreenshot 2023-08-25 at 16.37.39Screenshot 2023-08-25 at 16.37.39https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2014.35.16.pngScreenshot 2023-09-05 at 14.35.16Screenshot 2023-09-05 at 14.35.16https://www.threatfabric.com/hubfs/Screenshot%202023-09-15%20at%2011.42.54.pngScreenshot 2023-09-15 at 11.42.54Screenshot 2023-09-15 at 11.42.54https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2014.51.07.pngScreenshot 2023-09-05 at 14.51.07Screenshot 2023-09-05 at 14.51.07https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2016.13.28.pngScreenshot 2023-09-07 at 16.13.28Screenshot 2023-09-07 at 16.13.28https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2016.43.27.pngScreenshot 2023-09-05 at 16.43.27Screenshot 2023-09-05 at 16.43.27https://www.threatfabric.com/hubfs/Screenshot%202023-09-04%20at%2013.09.06.pngScreenshot 2023-09-04 at 13.09.06Screenshot 2023-09-04 at 13.09.06https://www.threatfabric.com/hubfs/TF_LightSpy-1.jpgTF_LightSpy-1TF_LightSpy-1https://www.threatfabric.com/hubfs/Screenshot%202023-09-15%20at%2014.43.31.pngScreenshot 2023-09-15 at 14.43.31Screenshot 2023-09-15 at 14.43.31https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2014.41.25.pngScreenshot 2023-09-05 at 14.41.25Screenshot 2023-09-05 at 14.41.25https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2016.06.19.pngScreenshot 2023-09-07 at 16.06.19Screenshot 2023-09-07 at 16.06.19https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2016.06.40.pngScreenshot 2023-09-05 at 16.06.40Screenshot 2023-09-05 at 16.06.40https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2011.57.29.pngScreenshot 2023-09-07 at 11.57.29Screenshot 2023-09-07 at 11.57.29https://www.threatfabric.com/hubfs/TF_LightSpy_Toolset.pngTF_LightSpy_ToolsetTF_LightSpy_Toolsethttps://www.threatfabric.com/hubfs/Screenshot%202023-08-17%20at%2017.57.23%20copy%202.pngScreenshot 2023-08-17 at 17.57.23 copy 2Screenshot 2023-08-17 at 17.57.23 copy 2https://www.threatfabric.com/hubfs/Screenshot%202023-08-28%20at%2016.02.24.pngScreenshot 2023-08-28 at 16.02.24Screenshot 2023-08-28 at 16.02.24https://www.threatfabric.com/hubfs/Screenshot%202023-08-09%20at%2014.11.33%20copy.pngScreenshot 2023-08-09 at 14.11.33 copyScreenshot 2023-08-09 at 14.11.33 copyhttps://www.threatfabric.com/hubfs/ios_expoit_chain_lightspy_07.pngios_expoit_chain_lightspy_07ios_expoit_chain_lightspy_07https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2014.42.30.pngScreenshot 2023-09-05 at 14.42.30Screenshot 2023-09-05 at 14.42.30https://www.threatfabric.com/hubfs/Screenshot%202023-08-10%20at%2012.30.15%20copy.pngScreenshot 2023-08-10 at 12.30.15 copyScreenshot 2023-08-10 at 12.30.15 copyhttps://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2015.58.48.pngScreenshot 2023-09-07 at 15.58.48Screenshot 2023-09-07 at 15.58.48https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2011.16.02.pngScreenshot 2023-09-05 at 11.16.02Screenshot 2023-09-05 at 11.16.02https://www.threatfabric.com/hubfs/Screenshot%202023-09-05%20at%2011.24.03.pngScreenshot 2023-09-05 at 11.24.03Screenshot 2023-09-05 at 11.24.03https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2011.54.14%20copy.pngScreenshot 2023-09-07 at 11.54.14 copyScreenshot 2023-09-07 at 11.54.14 copyhttps://www.threatfabric.com/hubfs/Screenshot%202023-09-03%20at%2011.32.25.pngScreenshot 2023-09-03 at 11.32.25Screenshot 2023-09-03 at 11.32.25https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2016.16.47.pngScreenshot 2023-09-07 at 16.16.47Screenshot 2023-09-07 at 16.16.47https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2012.02.06.pngScreenshot 2023-09-07 at 12.02.06Screenshot 2023-09-07 at 12.02.06https://www.threatfabric.com/hubfs/Screenshot%202023-09-15%20at%2016.32.34.pngScreenshot 2023-09-15 at 16.32.34Screenshot 2023-09-15 at 16.32.34https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2015.32.22.pngScreenshot 2023-09-07 at 15.32.22Screenshot 2023-09-07 at 15.32.22https://www.threatfabric.com/hubfs/Screenshot%202023-09-07%20at%2015.33.37.pngScreenshot 2023-09-07 at 15.33.37Screenshot 2023-09-07 at 15.33.37https://www.threatfabric.com/hubfs/Screenshot%202023-08-25%20at%2017.40.23.pngScreenshot 2023-08-25 at 17.40.23Screenshot 2023-08-25 at 17.40.23https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Screenshot%202023-09-04%20at%2017.08.27.pngScreenshot 2023-09-04 at 17.08.27Screenshot 2023-09-04 at 17.08.272023-10-02https://www.threatfabric.com/blogs/vultur-con-v-de-vnchttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/playstore.webpplaystoreplaystorehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/targets-graph.pngtargets-graphtargets-graphhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-vs-vultur.webpbrunhilda-vs-vulturbrunhilda-vs-vulturhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/settings-panel.webpsettings-panelsettings-panelhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-old-vs-new.webpbrunhilda-old-vs-newbrunhilda-old-vs-newhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/vultur-flow-diagram.webpvultur-flow-diagramvultur-flow-diagramhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/registration.pngregistrationregistrationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/a11y.webpa11ya11yhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/intro.webpintrointro2023-06-16https://www.threatfabric.com/blogs/exposing-crocodilus-new-device-takeover-malware-targeting-android-deviceshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/debug_mesages.pngdebug_mesagesdebug_mesageshttps://www.threatfabric.com/hubfs/device_tag.pngdevice_tagdevice_taghttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide2-2.jpegSlide2-2Slide2-2https://www.threatfabric.com/hubfs/crypto_message_cut.pngcrypto_message_cutcrypto_message_cuthttps://www.threatfabric.com/hubfs/Slide3-2.jpegSlide3-2Slide3-2https://www.threatfabric.com/hubfs/TF_Blog_Crocodilus.jpgTF_Blog_CrocodilusTF_Blog_Crocodilus2025-03-31https://www.threatfabric.com/blogs/zombinder-ermac-and-desktop-stealershttps://www.threatfabric.com/hubfs/Threatfabric/images/laplas.pnglaplaslaplashttps://www.threatfabric.com/hubfs/Threatfabric/images/cover.jpgcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/aurora.pngauroraaurorahttps://www.threatfabric.com/hubfs/Threatfabric/images/zombinder.pngzombinderzombinderhttps://www.threatfabric.com/hubfs/Threatfabric/images/binding.pngbindingbindinghttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/xenomorph.pngxenomorphxenomorphhttps://www.threatfabric.com/hubfs/Threatfabric/images/xenomorph_vidmate.pngxenomorph_vidmatexenomorph_vidmatehttps://www.threatfabric.com/hubfs/Threatfabric/images/website.pngwebsitewebsitehttps://www.threatfabric.com/hubfs/Threatfabric/images/dropper.pngdropperdropperhttps://www.threatfabric.com/hubfs/Threatfabric/images/erbium.pngerbiumerbiumhttps://www.threatfabric.com/hubfs/40185.png40185401852023-06-16https://www.threatfabric.com/resources/unlock-insights-the-anatsa-banking-trojan-campaign-reporthttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard.pngThreatFabricSocialCardThreatFabricSocialCard2024-02-05https://www.threatfabric.com/blogs/behavioural-analytics-privacy-and-regulationhttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207.2%20-%20Behavioral%20Analytics_Privacy.jpgLightning Campaign 7.2 - Behavioral Analytics_PrivacyLightning Campaign 7.2 - Behavioral Analytics_Privacyhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Blof%202%20image%20.pngBlof 2 image Blof 2 image https://www.threatfabric.com/hubfs/Screenshot%202025-04-02%20at%2010.55.25.pngScreenshot 2025-04-02 at 10.55.25Screenshot 2025-04-02 at 10.55.25https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2025-04-08https://www.threatfabric.com/blogs/exobot_android_banking_trojan_on_the_risehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_device_admin_nagging_screen.pngexobot_android_banking_trojan_on_the_rise_device_admin_nagging_screenexobot_android_banking_trojan_on_the_rise_device_admin_nagging_screenhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_overlay_for_postbank_finanzassistent.pngexobot_android_banking_trojan_on_the_rise_overlay_for_postbank_finanzassistentexobot_android_banking_trojan_on_the_rise_overlay_for_postbank_finanzassistenthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_code_snippet_reset_password_or_lock_device.pngexobot_android_banking_trojan_on_the_rise_code_snippet_reset_password_or_lock_deviceexobot_android_banking_trojan_on_the_rise_code_snippet_reset_password_or_lock_devicehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_marcher_documentation_1.jpgexobot_android_banking_trojan_on_the_rise_marcher_documentation_1exobot_android_banking_trojan_on_the_rise_marcher_documentation_1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_marcher_documentation_2.jpgexobot_android_banking_trojan_on_the_rise_marcher_documentation_2exobot_android_banking_trojan_on_the_rise_marcher_documentation_2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_marcher_mobile_banking_trojan.webpexobot_android_banking_trojan_on_the_rise_marcher_mobile_banking_trojanexobot_android_banking_trojan_on_the_rise_marcher_mobile_banking_trojanhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_overlays_for_phishing_google_play_facebook_and_ing_diba.pngexobot_android_banking_trojan_on_the_rise_overlays_for_phishing_google_play_facebook_and_ing_dibaexobot_android_banking_trojan_on_the_rise_overlays_for_phishing_google_play_facebook_and_ing_dibahttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_marcher_c2_admin_panel.pngexobot_android_banking_trojan_on_the_rise_marcher_c2_admin_panelexobot_android_banking_trojan_on_the_rise_marcher_c2_admin_panelhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_code_snippet_malware_forcing_device_back_to_home_screen.pngexobot_android_banking_trojan_on_the_rise_code_snippet_malware_forcing_device_back_to_home_screenexobot_android_banking_trojan_on_the_rise_code_snippet_malware_forcing_device_back_to_home_screenhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_bot_amount_by_country.pngexobot_android_banking_trojan_on_the_rise_bot_amount_by_countryexobot_android_banking_trojan_on_the_rise_bot_amount_by_countryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_runtastic_sample_permission_prompt.pngexobot_android_banking_trojan_on_the_rise_runtastic_sample_permission_promptexobot_android_banking_trojan_on_the_rise_runtastic_sample_permission_prompthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_code_snippet_malware_intercepting_sms_mms_messages.pngexobot_android_banking_trojan_on_the_rise_code_snippet_malware_intercepting_sms_mms_messagesexobot_android_banking_trojan_on_the_rise_code_snippet_malware_intercepting_sms_mms_messageshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-marcher/exobot_android_banking_trojan_on_the_rise_bot_amount_by_android_version.pngexobot_android_banking_trojan_on_the_rise_bot_amount_by_android_versionexobot_android_banking_trojan_on_the_rise_bot_amount_by_android_version2023-05-23https://www.threatfabric.com/webinarshttps://www.threatfabric.com/hubfs/Threatfabric/images/hacker.pnghackerhackerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2025-06-12https://www.threatfabric.com/blogs/clarity-on-australian-scam-regulationshttps://www.threatfabric.com/hubfs/KenPalla.pngKenPallaKenPallahttps://www.threatfabric.com/hubfs/TF_KenPalla_ClarityOnAustralianScamRegulations_SOCIAL.jpgTF_KenPalla_ClarityOnAustralianScamRegulations_SOCIALTF_KenPalla_ClarityOnAustralianScamRegulations_SOCIALhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852024-10-15https://www.threatfabric.com/blogs/new-android-malware-herodotus-mimics-human-behaviour-to-evade-detectionhttps://www.threatfabric.com/hubfs/panel-1.pngpanel-1panel-1https://www.threatfabric.com/hubfs/dropper.pngdropperdropperhttps://www.threatfabric.com/hubfs/omitted_features.pngomitted_featuresomitted_featureshttps://www.threatfabric.com/hubfs/brkwl_herodotus.pngbrkwl_herodotusbrkwl_herodotushttps://www.threatfabric.com/hubfs/randomizing_delays.pngrandomizing_delaysrandomizing_delayshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/announcement.pngannouncementannouncementhttps://www.threatfabric.com/hubfs/brkwl_brokewell.pngbrkwl_brokewellbrkwl_brokewellhttps://www.threatfabric.com/hubfs/MTI_Blog_Herodotus2.jpgMTI_Blog_Herodotus2MTI_Blog_Herodotus2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/panel_delay.pngpanel_delaypanel_delayhttps://www.threatfabric.com/hubfs/overlay.pngoverlayoverlayhttps://www.threatfabric.com/hubfs/capabilities-1.pngcapabilities-1capabilities-1https://www.threatfabric.com/hubfs/overlay_code.pngoverlay_codeoverlay_code2025-10-28https://www.threatfabric.com/blogs/fusion-fireside-2-threat-intelligence-collaboration-and-community-with-teresa-walshhttps://www.threatfabric.com/hubfs/TF_FusionFireside_TeresaWalsh.pngTF_FusionFireside_TeresaWalshTF_FusionFireside_TeresaWalshhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2024-10-31https://www.threatfabric.com/blogs/android-banking-trojan-chameleon-is-back-in-actionhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_Chameleon.jpgTF_ChameleonTF_Chameleonhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/image-png-Dec-06-2023-07-04-29-4927-PM.pngimage-png-Dec-06-2023-07-04-29-4927-PMimage-png-Dec-06-2023-07-04-29-4927-PMhttps://www.threatfabric.com/hubfs/image-png-Dec-07-2023-10-11-01-9565-AM.pngimage-png-Dec-07-2023-10-11-01-9565-AMimage-png-Dec-07-2023-10-11-01-9565-AMhttps://www.threatfabric.com/hubfs/image-png-Nov-29-2023-04-31-16-9294-PM.pngimage-png-Nov-29-2023-04-31-16-9294-PMimage-png-Nov-29-2023-04-31-16-9294-PMhttps://www.threatfabric.com/hubfs/image-png-Dec-13-2023-09-01-56-4869-PM.pngimage-png-Dec-13-2023-09-01-56-4869-PMimage-png-Dec-13-2023-09-01-56-4869-PM2024-01-03https://www.threatfabric.com/blogs/2020_year_of_the_rathttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/google_authenticator.jpggoogle_authenticatorgoogle_authenticatorhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/hydra_overlays.pnghydra_overlayshydra_overlayshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/anubis_rat_post.pnganubis_rat_postanubis_rat_posthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/Screenshot%202023-03-03%20at%2011.10.58%20AM.pngScreenshot 2023-03-03 at 11.10.58 AMScreenshot 2023-03-03 at 11.10.58 AMhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2020-year-of-the-rat/australian_browser_overlay.pngaustralian_browser_overlayaustralian_browser_overlay2023-05-23https://www.threatfabric.com/blogs/fusion-fireside-16-nearly-28-years-on-the-front-line-of-fraud-with-anton-jan-cozijnsenhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_AntonJanCozijnsen.jpgTF_FusionFireside_AntonJanCozijnsenTF_FusionFireside_AntonJanCozijnsenhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2026-02-18https://www.threatfabric.com/blogs/behavioral-analytics-scamshttps://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.09.12.pngScreenshot 2025-03-13 at 11.09.12Screenshot 2025-03-13 at 11.09.12https://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.05.42.pngScreenshot 2025-03-13 at 11.05.42Screenshot 2025-03-13 at 11.05.42https://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.06.20.pngScreenshot 2025-03-13 at 11.06.20Screenshot 2025-03-13 at 11.06.20https://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.05.08.pngScreenshot 2025-03-13 at 11.05.08Screenshot 2025-03-13 at 11.05.08https://www.threatfabric.com/hubfs/Screenshot%202025-03-13%20at%2011.07.24.pngScreenshot 2025-03-13 at 11.07.24Screenshot 2025-03-13 at 11.07.24https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Lightning%20Campaign%207.1%20-%20Behavioral%20Analytics_Scams.jpgLightning Campaign 7.1 - Behavioral Analytics_ScamsLightning Campaign 7.1 - Behavioral Analytics_Scamshttps://www.threatfabric.com/hubfs/40185.png40185401852025-04-08https://www.threatfabric.com/blogs/bianlian_from_rags_to_riches_the_malware_dropper_that_had_a_dreamhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/DroppersOverTime.pngDroppersOverTimeDroppersOverTimehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/virustotal_detection_rate_2.webpvirustotal_detection_rate_2virustotal_detection_rate_2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/card.webpcardcardhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/flow_diagram.pngflow_diagramflow_diagramhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/overlay_banks.pngoverlay_banksoverlay_bankshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/bianlian_in_the_google_play.webpbianlian_in_the_google_playbianlian_in_the_google_playhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bianlian/virustotal_detection_rate_1.webpvirustotal_detection_rate_1virustotal_detection_rate_12023-05-23https://www.threatfabric.com/resources/fraud-risk-suitehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-08-24https://www.threatfabric.com/blogs/chameleon-is-now-targeting-employees-masquerading-as-crm-apphttps://www.threatfabric.com/hubfs/Slide2-Jul-29-2024-03-10-32-6973-PM.pngSlide2-Jul-29-2024-03-10-32-6973-PMSlide2-Jul-29-2024-03-10-32-6973-PMhttps://www.threatfabric.com/hubfs/Slide1-Jul-29-2024-03-09-02-8496-PM.pngSlide1-Jul-29-2024-03-09-02-8496-PMSlide1-Jul-29-2024-03-09-02-8496-PMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_Chameleon_2024.jpgTF_Chameleon_2024TF_Chameleon_2024https://www.threatfabric.com/hubfs/Slide3-Jul-29-2024-03-10-47-9967-PM.pngSlide3-Jul-29-2024-03-10-47-9967-PMSlide3-Jul-29-2024-03-10-47-9967-PMhttps://www.threatfabric.com/hubfs/40185.png40185401852024-08-15https://www.threatfabric.com/blogs/google-play-droppershttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/gymdrop_website.webpgymdrop_websitegymdrop_websitehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/filtering.webpfilteringfilteringhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/timeline.webptimelinetimelinehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/update_process.webpupdate_processupdate_processhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/versions.webpversionsversionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/alien_installation.webpalien_installationalien_installationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP2.webpGP2GP2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/gymdrop_update.webpgymdrop_updategymdrop_updatehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP_tactics.webpGP_tacticsGP_tacticshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/gymdrop.webpgymdropgymdrophttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/brunhilda_installation.webpbrunhilda_installationbrunhilda_installationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/droppers.webpdroppersdroppershttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP_fud.webpGP_fudGP_fudhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/gymdrop_filtering.webpgymdrop_filteringgymdrop_filteringhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP_fam_stats.webpGP_fam_statsGP_fam_statshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/us_campaigns.webpus_campaignsus_campaignshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/GP1.webpGP1GP1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/qr_scanner.webpqr_scannerqr_scannerhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/c2_communication.webpc2_communicationc2_communicationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/alien_campaigns.webpalien_campaignsalien_campaignshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/deceive-the-heavens/anatsa.webpanatsaanatsa2023-05-23https://www.threatfabric.com/blogs/alien_the_story_of_cerberus_demisehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/forum1.pngforum1forum1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/alienc2.pngalienc2alienc2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/forum3.pngforum3forum3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/tweet.webptweettweethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/screenshot.webpscreenshotscreenshothttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/cerberusc2.pngcerberusc2cerberusc2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/forum4.pngforum4forum4https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/forum2.pngforum2forum2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/cerberus_samples.pngcerberus_samplescerberus_sampleshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/alien-demise/targets.pngtargetstargets2023-06-27https://www.threatfabric.com/blogs/new-trickmo-variant-device-take-over-malware-targeting-banking-fintech-wallet-auth-apphttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/image-png-May-07-2026-09-14-36-3932-PM.pngimage-png-May-07-2026-09-14-36-3932-PMimage-png-May-07-2026-09-14-36-3932-PMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/image-png-May-07-2026-09-05-29-1162-PM.pngimage-png-May-07-2026-09-05-29-1162-PMimage-png-May-07-2026-09-05-29-1162-PMhttps://www.threatfabric.com/hubfs/network_ton.pngnetwork_tonnetwork_tonhttps://www.threatfabric.com/hubfs/image-png-May-07-2026-09-17-11-7404-PM.pngimage-png-May-07-2026-09-17-11-7404-PMimage-png-May-07-2026-09-17-11-7404-PMhttps://www.threatfabric.com/hubfs/trickmoC_report-1.pngtrickmoC_report-1trickmoC_report-1https://www.threatfabric.com/hubfs/screens-png.pngscreens-pngscreens-pnghttps://www.threatfabric.com/hubfs/MTI_TrickMo2.jpgMTI_TrickMo2MTI_TrickMo22026-05-11https://www.threatfabric.com/blogs/iptv-campaigns-target-football-fans-across-multiple-countrieshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/facebook-ad-multiple-india.pngfacebook-ad-multiple-indiafacebook-ad-multiple-indiahttps://www.threatfabric.com/hubfs/facebook-ad-btmob-india.pngfacebook-ad-btmob-indiafacebook-ad-btmob-indiahttps://www.threatfabric.com/hubfs/Blog_Piracy_FollowUp_Countries.jpgBlog_Piracy_FollowUp_CountriesBlog_Piracy_FollowUp_Countrieshttps://www.threatfabric.com/hubfs/undefined-Jun-24-2026-06-31-46-3349-AM.pngundefined-Jun-24-2026-06-31-46-3349-AMundefined-Jun-24-2026-06-31-46-3349-AMhttps://www.threatfabric.com/hubfs/facebook-ad-tr.pngfacebook-ad-trfacebook-ad-trhttps://www.threatfabric.com/hubfs/TF_Soccer_Other.jpgTF_Soccer_OtherTF_Soccer_Otherhttps://www.threatfabric.com/hubfs/facebook-ad-antidot-pt.pngfacebook-ad-antidot-ptfacebook-ad-antidot-pthttps://www.threatfabric.com/hubfs/facebook-ad-multiple-pt.pngfacebook-ad-multiple-ptfacebook-ad-multiple-pthttps://www.threatfabric.com/hubfs/facebook-ad-medusa-it.pngfacebook-ad-medusa-itfacebook-ad-medusa-ithttps://www.threatfabric.com/hubfs/malicious-website-btmob-india.pngmalicious-website-btmob-indiamalicious-website-btmob-indiahttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2026-06-25https://www.threatfabric.com/blogs/investment-scams-vs-fraud-kill-chainhttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.04.pngScreenshot 2024-03-04 at 08.52.04Screenshot 2024-03-04 at 08.52.04https://www.threatfabric.com/hubfs/InvestmentFraud_Details@2x.pngInvestmentFraud_Details@2xInvestmentFraud_Details@2xhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.51.20.pngScreenshot 2024-03-04 at 08.51.20Screenshot 2024-03-04 at 08.51.20https://www.threatfabric.com/hubfs/TF_InvestmentScams.jpgTF_InvestmentScamsTF_InvestmentScamshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/InvestmentFraud_FeaturedImage@2x-1.pngInvestmentFraud_FeaturedImage@2x-1InvestmentFraud_FeaturedImage@2x-12024-04-24https://www.threatfabric.com/blogs/hook-a-new-ermac-fork-with-rat-capabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/images/rat.pngratrathttps://www.threatfabric.com/hubfs/Threatfabric/images/forks.pngforksforkshttps://www.threatfabric.com/hubfs/Threatfabric/images/capabilities.pngcapabilitiescapabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/images/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/advertisement.pngadvertisementadvertisementhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/scratch.pngscratchscratchhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/targets.pngtargetstargetshttps://www.threatfabric.com/hubfs/Threatfabric/images/stats-1.pngstats-1stats-1https://www.threatfabric.com/hubfs/Threatfabric/images/target_areas.pngtarget_areastarget_areas2023-06-16https://www.threatfabric.com/jobs/senior-android-developerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2024-09-03https://www.threatfabric.com/blogs/mysterybot__a_new_android_banking_trojan_ready_for_android_7_and_8https://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/koodous_mystery_loki_c2_link.webpkoodous_mystery_loki_c2_linkkoodous_mystery_loki_c2_linkhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/logo.webplogologohttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/foreground_apps_list.pngforeground_apps_listforeground_apps_listhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/MysteryL0cker_dashboard.webpMysteryL0cker_dashboardMysteryL0cker_dashboardhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/usagestats_permission.webpusagestats_permissionusagestats_permissionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/mysterybot/botcommands.webpbotcommandsbotcommands2023-05-23https://www.threatfabric.com/blogs/cerberus-a-new-banking-trojan-from-the-underworldhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/cover-cerberus.pngcover-cerberuscover-cerberushttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/twitter.pngtwittertwitterhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/overlay1.pngoverlay1overlay1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/overlay3.pngoverlay3overlay3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/evolution.pngevolutionevolutionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/overlay2.pngoverlay2overlay2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/cerberus/accesibility.pngaccesibilityaccesibility2023-03-03https://www.threatfabric.com/regions/europehttps://www.threatfabric.com/hubfs/TF_Patent2.jpgTF_Patent2TF_Patent2https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabric_SocialCard-1ThreatFabric_SocialCard-1https://www.threatfabric.com/hubfs/ThreatFabric_europe_region_map_extreme_perspective_digital_line_a6781a13-ebf6-486e-9f50-48b16b5536f4.jpgThreatFabric_europe_region_map_extreme_perspective_digital_line_a6781a13-ebf6-486e-9f50-48b16b5536f4ThreatFabric_europe_region_map_extreme_perspective_digital_line_a6781a13-ebf6-486e-9f50-48b16b5536f4https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_MalwareGap4.jpgTF_MalwareGap4TF_MalwareGap42026-07-22https://www.threatfabric.com/blogs/datzbro-rat-hiding-behind-senior-travel-scamshttps://www.threatfabric.com/hubfs/Slide2-Sep-25-2025-09-21-46-6322-PM.pngSlide2-Sep-25-2025-09-21-46-6322-PMSlide2-Sep-25-2025-09-21-46-6322-PMhttps://www.threatfabric.com/hubfs/Slide3-Sep-25-2025-09-21-45-9714-PM.pngSlide3-Sep-25-2025-09-21-45-9714-PMSlide3-Sep-25-2025-09-21-45-9714-PMhttps://www.threatfabric.com/hubfs/TF_Datzbro.jpgTF_DatzbroTF_Datzbrohttps://www.threatfabric.com/hubfs/black_screen_density_semi.pngblack_screen_density_semiblack_screen_density_semihttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/samples.pngsamplessampleshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/scam_alert.pngscam_alertscam_alerthttps://www.threatfabric.com/hubfs/panel_translated.pngpanel_translatedpanel_translatedhttps://www.threatfabric.com/hubfs/schematic_mode.pngschematic_modeschematic_modehttps://www.threatfabric.com/hubfs/Slide4-Sep-25-2025-09-21-45-6182-PM.pngSlide4-Sep-25-2025-09-21-45-6182-PMSlide4-Sep-25-2025-09-21-45-6182-PMhttps://www.threatfabric.com/hubfs/Slide1-Sep-25-2025-09-21-45-6538-PM.pngSlide1-Sep-25-2025-09-21-45-6538-PMSlide1-Sep-25-2025-09-21-45-6538-PMhttps://www.threatfabric.com/hubfs/panel.pngpanelpanel2025-09-30https://www.threatfabric.com/blogs/threatfabric-appoints-andy-chandler-as-chief-commercial-officerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Andy%20Chandler.pngAndy ChandlerAndy Chandlerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2023-06-06https://www.threatfabric.com/blogs/romance-fraud-vs-fraud-kill-chainhttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.51.20.pngScreenshot 2024-03-04 at 08.51.20Screenshot 2024-03-04 at 08.51.20https://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.32.pngScreenshot 2024-03-04 at 08.52.32Screenshot 2024-03-04 at 08.52.32https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_RomanceFraud_Details.pngTF_CyberfraudKillchain_RomanceFraud_DetailsTF_CyberfraudKillchain_RomanceFraud_Detailshttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.04.pngScreenshot 2024-03-04 at 08.52.04Screenshot 2024-03-04 at 08.52.04https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_RomanceFraud_FeaturedImage.pngTF_CyberfraudKillchain_RomanceFraud_FeaturedImageTF_CyberfraudKillchain_RomanceFraud_FeaturedImage2024-03-06https://www.threatfabric.com/blogs/fusion-fireside-7-a-conversation-with-dave-laramy-from-danske-bankhttps://www.threatfabric.com/hubfs/TF_FusionFireside_DaveLaramy%201-1.jpgTF_FusionFireside_DaveLaramy 1-1TF_FusionFireside_DaveLaramy 1-1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852025-01-23https://www.threatfabric.com/blogs/sturnus-banking-trojan-bypassing-whatsapp-telegram-and-signalhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Screenshot%202025-11-18%20at%2012.30.15.pngScreenshot 2025-11-18 at 12.30.15Screenshot 2025-11-18 at 12.30.15https://www.threatfabric.com/hubfs/vnc.pngvncvnchttps://www.threatfabric.com/hubfs/MessagingApps.pngMessagingAppsMessagingAppshttps://www.threatfabric.com/hubfs/MTI_Blog_Sturnus3.jpgMTI_Blog_Sturnus3MTI_Blog_Sturnus3https://www.threatfabric.com/hubfs/image-png-Nov-18-2025-12-47-39-4206-PM.pngimage-png-Nov-18-2025-12-47-39-4206-PMimage-png-Nov-18-2025-12-47-39-4206-PMhttps://www.threatfabric.com/hubfs/Sturnus.pngSturnusSturnushttps://www.threatfabric.com/hubfs/treemode.pngtreemodetreemodehttps://www.threatfabric.com/hubfs/Block_bank_overlays.pngBlock_bank_overlaysBlock_bank_overlayshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/env.pngenvenvhttps://www.threatfabric.com/hubfs/communication.pngcommunicationcommunication2025-11-20https://www.threatfabric.com/blogs/perseus-dto-malware-that-takes-noteshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Perseus_report_2.pngPerseus_report_2Perseus_report_2https://www.threatfabric.com/hubfs/MTI_Perseus.jpgMTI_PerseusMTI_Perseushttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Perseus_report_4.pngPerseus_report_4Perseus_report_4https://www.threatfabric.com/hubfs/Perseus_report_1-1.pngPerseus_report_1-1Perseus_report_1-1https://www.threatfabric.com/hubfs/image-png-Mar-18-2026-10-27-19-7485-AM.pngimage-png-Mar-18-2026-10-27-19-7485-AMimage-png-Mar-18-2026-10-27-19-7485-AMhttps://www.threatfabric.com/hubfs/Screenshot%202026-03-18%20at%2011.31.14.pngScreenshot 2026-03-18 at 11.31.14Screenshot 2026-03-18 at 11.31.14https://www.threatfabric.com/hubfs/Screenshot%202026-03-18%20at%2011-33-45-png.pngScreenshot 2026-03-18 at 11-33-45-pngScreenshot 2026-03-18 at 11-33-45-pnghttps://www.threatfabric.com/hubfs/Perseus_report_3.pngPerseus_report_3Perseus_report_3https://www.threatfabric.com/hubfs/perseus-ad-italy-blog.pngperseus-ad-italy-blogperseus-ad-italy-blog2026-07-14https://www.threatfabric.com/blogs/sophisticated-google-play-bankbot-trojan-campaignshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_install_non_market_apps_1.pngsophisticated_google_play_bankbot_trojan_campaigns_install_non_market_apps_1sophisticated_google_play_bankbot_trojan_campaigns_install_non_market_apps_1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_bankbot_trojan_flowchart.jpgsophisticated_google_play_bankbot_trojan_campaigns_bankbot_trojan_flowchartsophisticated_google_play_bankbot_trojan_campaigns_bankbot_trojan_flowcharthttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_real_funny_videos.webpsophisticated_google_play_bankbot_trojan_campaigns_real_funny_videossophisticated_google_play_bankbot_trojan_campaigns_real_funny_videoshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_required_permissions.webpsophisticated_google_play_bankbot_trojan_campaigns_required_permissionssophisticated_google_play_bankbot_trojan_campaigns_required_permissionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_bankbot_dropper_investigation_samples.webpsophisticated_google_play_bankbot_trojan_campaigns_bankbot_dropper_investigation_samplessophisticated_google_play_bankbot_trojan_campaigns_bankbot_dropper_investigation_sampleshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_nagging_install_screen_1.pngsophisticated_google_play_bankbot_trojan_campaigns_nagging_install_screen_1sophisticated_google_play_bankbot_trojan_campaigns_nagging_install_screen_1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_install_non_market_apps_2.pngsophisticated_google_play_bankbot_trojan_campaigns_install_non_market_apps_2sophisticated_google_play_bankbot_trojan_campaigns_install_non_market_apps_2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_bankbot_apps_that_have_been_uploaded_to_google_play.webpsophisticated_google_play_bankbot_trojan_campaigns_bankbot_apps_that_have_been_uploaded_to_google_playsophisticated_google_play_bankbot_trojan_campaigns_bankbot_apps_that_have_been_uploaded_to_google_playhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_apks_with_network_host_77_72_82_120.webpsophisticated_google_play_bankbot_trojan_campaigns_apks_with_network_host_77_72_82_120sophisticated_google_play_bankbot_trojan_campaigns_apks_with_network_host_77_72_82_120https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_nagging_install_screen_2.pngsophisticated_google_play_bankbot_trojan_campaigns_nagging_install_screen_2sophisticated_google_play_bankbot_trojan_campaigns_nagging_install_screen_2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_apks_with_network_host_185_153_198_52.pngsophisticated_google_play_bankbot_trojan_campaigns_apks_with_network_host_185_153_198_52sophisticated_google_play_bankbot_trojan_campaigns_apks_with_network_host_185_153_198_52https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sophisticated-google/sophisticated_google_play_bankbot_trojan_campaigns_botnet_statistics.pngsophisticated_google_play_bankbot_trojan_campaigns_botnet_statisticssophisticated_google_play_bankbot_trojan_campaigns_botnet_statistics2023-06-16https://www.threatfabric.com/blogs/threatfabric-appoints-andrew-hawthorne-as-vp-of-global-saleshttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(38).pngMicrosoftTeams-image (38)MicrosoftTeams-image (38)https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2023-09-18https://www.threatfabric.com/blogs/threatfabric-appoints-maurits-lucas-as-vp-of-sales-engineering-product-marketinghttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_Team_Maurits.pngTF_Team_MauritsTF_Team_Mauritshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2023-10-11https://www.threatfabric.com/blogs/h1-2022-mobile-threat-landscapehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/poc.webppocpochttps://www.threatfabric.com/hubfs/Threatfabric/images/tf_q2_2022_mobilethreatlandscape_sheetsize.001.jpegtf_q2_2022_mobilethreatlandscape_sheetsize.001tf_q2_2022_mobilethreatlandscape_sheetsize.001https://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/odffamilies.webpodffamiliesodffamilieshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/ermac.webpermacermachttps://www.threatfabric.com/hubfs/Threatfabric/images/voice.pngvoicevoicehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/dropper.webpdropperdropperhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/countries.webpcountriescountrieshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/installation.webpinstallationinstallationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/stats.webpstatsstatshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/fraud.webpfraudfraudhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/droppers.webpdroppersdroppershttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/ca.webpcacahttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/2022-mobile-threat/families.webpfamiliesfamilies2023-06-27https://www.threatfabric.com/blogs/threatfabric-appoints-emma-galvani-as-head-of-marketinghttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_Team_Emma.jpgTF_Team_EmmaTF_Team_Emma2023-09-13https://www.threatfabric.com/contact2025-11-10https://www.threatfabric.com/blogs/double-trouble-in-latamhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/ats.pngatsatshttps://www.threatfabric.com/hubfs/Threatfabric/images/panel.pngpanelpanelhttps://www.threatfabric.com/hubfs/Threatfabric/images/email.pngemailemailhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/screens.pngscreensscreenshttps://www.threatfabric.com/hubfs/Threatfabric/images/brasdex-cover-minified.pngbrasdex-cover-minifiedbrasdex-cover-minifiedhttps://www.threatfabric.com/hubfs/Threatfabric/images/autoit.pngautoitautoithttps://www.threatfabric.com/hubfs/Threatfabric/images/evolution.pngevolutionevolutionhttps://www.threatfabric.com/hubfs/Threatfabric/images/transfer.pngtransfertransferhttps://www.threatfabric.com/hubfs/Threatfabric/images/pix.pngpixpixhttps://www.threatfabric.com/hubfs/Threatfabric/images/infections.pnginfectionsinfectionshttps://www.threatfabric.com/hubfs/Threatfabric/images/stats.pngstatsstatshttps://www.threatfabric.com/hubfs/Threatfabric/images/logs.pnglogslogshttps://www.threatfabric.com/hubfs/Threatfabric/images/msi.pngmsimsi2023-06-16https://www.threatfabric.com/blogs/ermac-another-cerberus-rebornhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/traffic.webptraffictraffichttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/amplebot.webpamplebotamplebothttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/campaigns.webpcampaignscampaignshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/ermac.webpermacermachttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/context.webpcontextcontexthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/ermac/cover.webpcovercover2023-03-03https://www.threatfabric.com/regions/americashttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabric_SocialCard-1ThreatFabric_SocialCard-1https://www.threatfabric.com/hubfs/ShiftLeftOnFraud_FeaturedImage2.jpgShiftLeftOnFraud_FeaturedImage2ShiftLeftOnFraud_FeaturedImage2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_Patent2.jpgTF_Patent2TF_Patent2https://www.threatfabric.com/hubfs/ThreatFabric_globe_view_americas_focus_americas_region_North_Am_b8253e2b-07f2-4900-b68e-3e7423ddc063.jpgThreatFabric_globe_view_americas_focus_americas_region_North_Am_b8253e2b-07f2-4900-b68e-3e7423ddc063ThreatFabric_globe_view_americas_focus_americas_region_North_Am_b8253e2b-07f2-4900-b68e-3e7423ddc0632026-07-22https://www.threatfabric.com/blogs/fusion-fireside-3-cyber-defence-community-and-collaboration-with-craig-ricehttps://www.threatfabric.com/hubfs/TF_FusionFireside_CraigRice.pngTF_FusionFireside_CraigRiceTF_FusionFireside_CraigRicehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2024-10-31https://www.threatfabric.com/blogs/behavioural-analytics-mobile-malware-will-they-get-alonghttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Lightning%20Campaign%207%20-%20Behavioral%20Analytics_MobileMalware-1.jpgLightning Campaign 7 - Behavioral Analytics_MobileMalware-1Lightning Campaign 7 - Behavioral Analytics_MobileMalware-1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2025-05-13https://www.threatfabric.com/blogs/exobot-android-malware-spreading-via-google-play-storehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot/exobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play.webpexobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_playexobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_playhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot/exobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_the_usveryfood_botnet.webpexobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_the_usveryfood_botnetexobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_the_usveryfood_botnethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot/exobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_number_of_infected_devices_per_country.pngexobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_number_of_infected_devices_per_countryexobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_number_of_infected_devices_per_countryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot/exobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_infected_android_versions.pngexobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_infected_android_versionsexobot_android_malware_spreading_via_google_play_store_new_apps_dropping_exobot_malware_via_google_play_infected_android_versionshttps://www.threatfabric.com/hubfs/40185.png40185401852023-03-03https://www.threatfabric.comhttps://www.threatfabric.com/hubfs/Threatfabric/logos/5stars.png5stars5starshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FRS_Synergy-1.pngTFFRSSynergy1TFFRSSynergy1https://www.threatfabric.com/hubfs/TF_HeroImage1.jpgTFHeroImage1TFHeroImage1https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/TF_Website_Flags.pngTFWebsiteFlagsTFWebsiteFlagshttps://www.threatfabric.com/hubfs/Threatfabric/logos/gartner-logo-white.svggartnerlogowhitegartnerlogowhitehttps://www.threatfabric.com/hubfs/TF_Blog_Piracy_SOCIAL.jpgTFBlogPiracySOCIALTFBlogPiracySOCIALhttps://www.threatfabric.com/hubfs/TF_Soccer_Other.jpgTFSoccerOtherTFSoccerOtherhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_BeckyHolmes.jpgTFFusionFiresideBeckyHolmesTFFusionFiresideBeckyHolmes2025-02-26https://www.threatfabric.com/blogs/fusion-fireside-9-from-telecom-to-threat-intel-reflections-on-nordic-cyber-resilience-with-morten-tandlehttps://www.threatfabric.com/hubfs/TF_FusionFireside_MortenTandle.jpgTF_FusionFireside_MortenTandleTF_FusionFireside_MortenTandlehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2025-03-27https://www.threatfabric.com/blogs/achieving-new-heights-iso-27701-and-iso-22301-certificationshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/image%20(2).pngimage (2)image (2)https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2024-07-23https://www.threatfabric.com/blogs/rabobank-joins-threatfabric-investors-to-accelerate-fraud-prevention-growth-through-co-creationhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_RaboInvestments_SOCIAL%201.pngTF_RaboInvestments_SOCIAL 1TF_RaboInvestments_SOCIAL 1https://www.threatfabric.com/hubfs/40185.png40185401852024-12-04https://www.threatfabric.com/blogs/vultur-v-for-vnchttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/intro.webpintrointrohttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-old-vs-new.webpbrunhilda-old-vs-newbrunhilda-old-vs-newhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/a11y.webpa11ya11yhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-sample-mti.pngbrunhilda-sample-mtibrunhilda-sample-mtihttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/targets-graph.pngtargets-graphtargets-graphhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/brunhilda-vs-vultur.webpbrunhilda-vs-vulturbrunhilda-vs-vulturhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/settings-panel.webpsettings-panelsettings-panelhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/registration.pngregistrationregistrationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/vultur-flow-diagram.webpvultur-flow-diagramvultur-flow-diagramhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/vultur/playstore.webpplaystoreplaystore2023-06-16https://www.threatfabric.com/blogs/anubis_2_malware_and_afterlifehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/targets_per_region.pngtargets_per_regiontargets_per_regionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/bankbot.jpgbankbotbankbothttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/targets_per_subregion.pngtargets_per_subregiontargets_per_subregionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/targets_per_country.pngtargets_per_countrytargets_per_countryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/bank_bot_tree.webpbank_bot_treebank_bot_treehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/target_types.webptarget_typestarget_typeshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/anubis/anubis.webpanubisanubis2023-05-23https://www.threatfabric.com/blogs/device-intelligence-adapting-beyond-fingerprintinghttps://www.threatfabric.com/hubfs/TF_HyenaHologram.jpgTF_HyenaHologramTF_HyenaHologramhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/ATO%20-%20vishing.jpgATO - vishingATO - vishing2024-11-14https://www.threatfabric.com/blogs/xenomorph-malware-strikes-again-over-30-us-banks-now-targetedhttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard.pngThreatFabric_SocialCardThreatFabric_SocialCardhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2023-09-27https://www.threatfabric.com/blogs/xenomorph-v3-a-new-variant-with-ats-targeting-more-than-400-institutionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/cdn.pngcdncdnhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/ats-condition.pngats-conditionats-conditionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/zombinder.pngzombinderzombinderhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/targets-02.pngtargets-02targets-02https://www.threatfabric.com/hubfs/cover-2.pngcover-2cover-2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/authenticator.pngauthenticatorauthenticatorhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/cookies.pngcookiescookieshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/hadoken.pnghadokenhadokenhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/xenomorph-v3/ad.pngadad2023-06-27https://www.threatfabric.com/blogs/octo2-european-banks-already-under-attack-by-new-malware-varianthttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/octo_zombinder.pngocto_zombinderocto_zombinderhttps://www.threatfabric.com/hubfs/Slide1-Sep-20-2024-10-16-01-2033-AM.pngSlide1-Sep-20-2024-10-16-01-2033-AMSlide1-Sep-20-2024-10-16-01-2033-AMhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_Octo2.jpgTF_Octo2TF_Octo2https://www.threatfabric.com/hubfs/Slide4-Sep-20-2024-10-23-20-9512-AM.pngSlide4-Sep-20-2024-10-23-20-9512-AMSlide4-Sep-20-2024-10-23-20-9512-AM2024-09-24https://www.threatfabric.com/blogs/octo-new-odf-banking-trojanhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/wrapper2.webpwrapper2wrapper2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/dropper1.webpdropper1dropper1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/dropper2.webpdropper2dropper2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/campaign2.webpcampaign2campaign2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/actor2.webpactor2actor2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/landing.webplandinglandinghttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/campaign1.webpcampaign1campaign1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/odf.webpodfodfhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/actor1.webpactor1actor1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/panel.webppanelpanelhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/exobot_coper.webpexobot_coperexobot_coperhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/capabilities.webpcapabilitiescapabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/wrapper1.webpwrapper1wrapper1https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Look-out-for-Octos-tentacles/actor3.webpactor3actor32023-06-27https://www.threatfabric.com/blogs/stop-fraudsters-at-the-front-door-with-device-behavioural-intelligencehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_Blog_FrontDoor.jpgTF_Blog_FrontDoorTF_Blog_FrontDoor2025-09-23https://www.threatfabric.com/blogs/getting-ready-for-psr-in-the-uk-why-fraud-fusion-experts-should-carehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/PSR_Social1.jpgPSR_Social1PSR_Social12024-09-24https://www.threatfabric.com/blogs/threatfabric-uncovers-cyber-espionage-linked-to-state-backed-group-misusing-mobile-payment-systemshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard.pngThreatFabric_SocialCardThreatFabric_SocialCard2023-10-02https://www.threatfabric.com/blogs/sova-new-trojan-with-fowl-intentionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/context.webpcontextcontexthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/schema.webpschemaschemahttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/wallets.webpwalletswalletshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/cover.pngcovercoverhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/targets.webptargetstargetshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/graph.webpgraphgraphhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/sova/3stage.webp3stage3stage2023-06-27https://www.threatfabric.com/blogs/exobot_v2_update_staying_ahead_of_the_competitionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_main_module_functions.pngexobot_v2_update_staying_ahead_of_the_competition_main_module_functionsexobot_v2_update_staying_ahead_of_the_competition_main_module_functionshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_web_injects_in_the_exobot_panel.webpexobot_v2_update_staying_ahead_of_the_competition_web_injects_in_the_exobot_panelexobot_v2_update_staying_ahead_of_the_competition_web_injects_in_the_exobot_panelhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/csd_android_trojan_detection.pngcsd_android_trojan_detectioncsd_android_trojan_detectionhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_socks_proxy_related_strings.pngexobot_v2_update_staying_ahead_of_the_competition_socks_proxy_related_stringsexobot_v2_update_staying_ahead_of_the_competition_socks_proxy_related_stringshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_decrypted_http_traffic.pngexobot_v2_update_staying_ahead_of_the_competition_decrypted_http_trafficexobot_v2_update_staying_ahead_of_the_competition_decrypted_http_traffichttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_encrypted_http_traffic.pngexobot_v2_update_staying_ahead_of_the_competition_encrypted_http_trafficexobot_v2_update_staying_ahead_of_the_competition_encrypted_http_traffichttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/exobot-update/exobot_v2_update_staying_ahead_of_the_competition_obfuscated_loader_code.webpexobot_v2_update_staying_ahead_of_the_competition_obfuscated_loader_codeexobot_v2_update_staying_ahead_of_the_competition_obfuscated_loader_code2023-06-16https://www.threatfabric.com/regions/apachttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ThreatFabric_Asia_pacific_region_map_extreme_perspective_digita_9645cfad-529c-426a-83da-9e6465ce8dbe.jpgThreatFabric_Asia_pacific_region_map_extreme_perspective_digita_9645cfad-529c-426a-83da-9e6465ce8dbeThreatFabric_Asia_pacific_region_map_extreme_perspective_digita_9645cfad-529c-426a-83da-9e6465ce8dbehttps://www.threatfabric.com/hubfs/TF_Patent2.jpgTF_Patent2TF_Patent2https://www.threatfabric.com/hubfs/TF_MalwareGap4.jpgTF_MalwareGap4TF_MalwareGap4https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabric_SocialCard-1ThreatFabric_SocialCard-1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2026-07-22https://www.threatfabric.com/fusion-firesidehttps://www.threatfabric.com/hubfs/TF_FusionFireside_ChrisBone.jpgTFFusionFiresideChrisBoneTFFusionFiresideChrisBonehttps://www.threatfabric.com/hubfs/TF_FusionFireside_FreddyArthur.pngTFFusionFiresideFreddyArthurTFFusionFiresideFreddyArthurhttps://www.threatfabric.com/hubfs/TF_FusionFireside_JohnFokker.jpgTFFusionFiresideJohnFokkerTFFusionFiresideJohnFokkerhttps://www.threatfabric.com/hubfs/TF_FusionFireside_HakonAkerlund.jpgTFFusionFiresideHakonAkerlundTFFusionFiresideHakonAkerlundhttps://www.threatfabric.com/hubfs/TF_FusionFireside_JakeNorwood.jpgTFFusionFiresideJakeNorwoodTFFusionFiresideJakeNorwoodhttps://www.threatfabric.com/hubfs/TF_FusionFireside_SenanMoloney.jpgTFFusionFiresideSenanMoloneyTFFusionFiresideSenanMoloneyhttps://www.threatfabric.com/hubfs/TF_FusionFireside_FrederikMennes.jpgTFFusionFiresideFrederikMennesTFFusionFiresideFrederikMenneshttps://www.threatfabric.com/hubfs/TF_FusionFireside_CraigRice.pngTFFusionFiresideCraigRiceTFFusionFiresideCraigRicehttps://www.threatfabric.com/hubfs/TF_FusionFireside_MortenTandle.jpgTFFusionFiresideMortenTandleTFFusionFiresideMortenTandlehttps://www.threatfabric.com/hubfs/TF_FusionFireside_BeckyHolmes.jpgTFFusionFiresideBeckyHolmesTFFusionFiresideBeckyHolmeshttps://www.threatfabric.com/hubfs/TF_FusionFireside_DaveLaramy%201-1.jpgTFFusionFiresideDaveLaramy11TFFusionFiresideDaveLaramy11https://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGross.jpgTFFusionFiresideKeithGrossTFFusionFiresideKeithGrosshttps://www.threatfabric.com/hubfs/TF_FusionFireside_AntonJanCozijnsen.jpgTFFusionFiresideAntonJanCozijnsenTFFusionFiresideAntonJanCozijnsenhttps://www.threatfabric.com/hubfs/TF_Eward_Faded.pngTFEwardFadedTFEwardFadedhttps://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGordon.jpgTFFusionFiresideKeithGordonTFFusionFiresideKeithGordonhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_FusionFireside_PatrickBours.jpgTFFusionFiresidePatrickBoursTFFusionFiresidePatrickBourshttps://www.threatfabric.com/hubfs/TF_FusionFireside_Announcement3.pngTFFusionFiresideAnnouncement3TFFusionFiresideAnnouncement3https://www.threatfabric.com/hubfs/TF_FusionFireside_NeilGiles.jpgTFFusionFiresideNeilGilesTFFusionFiresideNeilGileshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_FeaturedImage.jpgTFFusionFiresideFeaturedImageTFFusionFiresideFeaturedImagehttps://www.threatfabric.com/hubfs/TF_FusionFireside_GaryWarner.jpgTFFusionFiresideGaryWarnerTFFusionFiresideGaryWarnerhttps://www.threatfabric.com/hubfs/TF_FusionFireside_TeresaWalsh.pngTFFusionFiresideTeresaWalshTFFusionFiresideTeresaWalsh2026-02-19https://www.threatfabric.com/blogs/threatfabrics-behavioural-fraud-detection-patent-what-it-meanshttps://www.threatfabric.com/hubfs/TF_Patent2.jpgTF_Patent2TF_Patent2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/undefined-Jul-20-2026-08-27-44-3095-AM.pngundefined-Jul-20-2026-08-27-44-3095-AMundefined-Jul-20-2026-08-27-44-3095-AMhttps://www.threatfabric.com/hubfs/40185.png40185401852026-07-22https://www.threatfabric.com/blogs/the-rage-of-android-banking-trojanshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/labels.webplabelslabelshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/conclusion.webpconclusionconclusionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/distribution.webpdistributiondistributionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/recap.webprecaprecaphttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/github.webpgithubgithubhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/overlay.webpoverlayoverlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/evasion.webpevasionevasionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/gustuff.webpgustuffgustuffhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/catalysts.webpcatalystscatalystshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/top_targets.webptop_targetstop_targetshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/ats.webpatsatshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/the-rage/MO.webpMOMO2023-06-27https://www.threatfabric.com/blogs/lightspy-implant-for-ioshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2016.15.03.pngScreenshot 2024-07-23 at 16.15.03Screenshot 2024-07-23 at 16.15.03https://www.threatfabric.com/hubfs/Screenshot%202024-07-29%20at%2014.06.32.pngScreenshot 2024-07-29 at 14.06.32Screenshot 2024-07-29 at 14.06.32https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-26%20at%2015.13.50.pngScreenshot 2024-07-26 at 15.13.50Screenshot 2024-07-26 at 15.13.50https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-18%20at%2010.13.19.pngScreenshot 2024-07-18 at 10.13.19Screenshot 2024-07-18 at 10.13.19https://www.threatfabric.com/hubfs/Screenshot%202024-07-10%20at%2016.53.55.pngScreenshot 2024-07-10 at 16.53.55Screenshot 2024-07-10 at 16.53.55https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2015.29.35.pngScreenshot 2024-07-22 at 15.29.35Screenshot 2024-07-22 at 15.29.35https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2016.29.58.pngScreenshot 2024-07-23 at 16.29.58Screenshot 2024-07-23 at 16.29.58https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-26%20at%2015.13.28.pngScreenshot 2024-07-26 at 15.13.28Screenshot 2024-07-26 at 15.13.28https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-26%20at%2015.14.11.pngScreenshot 2024-07-26 at 15.14.11Screenshot 2024-07-26 at 15.14.11https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2012.28.38.pngScreenshot 2024-07-23 at 12.28.38Screenshot 2024-07-23 at 12.28.38https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2013.49.11.pngScreenshot 2024-07-22 at 13.49.11Screenshot 2024-07-22 at 13.49.11https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-25%20at%2010.48.12.pngScreenshot 2024-07-25 at 10.48.12Screenshot 2024-07-25 at 10.48.12https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-17%20at%2013.33.40.pngScreenshot 2024-07-17 at 13.33.40Screenshot 2024-07-17 at 13.33.40https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/LightSpy-iOS-Layout.bmpLightSpy-iOS-LayoutLightSpy-iOS-Layouthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2016.10.59.pngScreenshot 2024-07-23 at 16.10.59Screenshot 2024-07-23 at 16.10.59https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-17%20at%2018.00.56.pngScreenshot 2024-07-17 at 18.00.56Screenshot 2024-07-17 at 18.00.56https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-30%20at%2011.37.13.pngScreenshot 2024-07-30 at 11.37.13Screenshot 2024-07-30 at 11.37.13https://www.threatfabric.com/hubfs/TF_LightSpyiOS.jpgTF_LightSpyiOSTF_LightSpyiOShttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2013.30.20.pngScreenshot 2024-07-22 at 13.30.20Screenshot 2024-07-22 at 13.30.20https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2014.14.35.pngScreenshot 2024-07-22 at 14.14.35Screenshot 2024-07-22 at 14.14.35https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-23%20at%2016.19.49.pngScreenshot 2024-07-23 at 16.19.49Screenshot 2024-07-23 at 16.19.49https://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-22%20at%2014.36.08.pngScreenshot 2024-07-22 at 14.36.08Screenshot 2024-07-22 at 14.36.08https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/LightSpyiOS/Screenshot%202024-07-24%20at%2018.04.08.pngScreenshot 2024-07-24 at 18.04.08Screenshot 2024-07-24 at 18.04.082024-10-29https://www.threatfabric.com/scam-prevention-in-the-nordics-with-behavioural-analyticshttps://www.threatfabric.com/hubfs/Screenshot%202024-12-10%20at%2015.27.42.pngScreenshot20241210at152742Screenshot20241210at152742https://www.threatfabric.com/hubfs/ScamCreature.jpgScamCreatureScamCreaturehttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/synergy.pngsynergysynergy2026-03-16https://www.threatfabric.com/blogs/letscall-new-sophisticated-vishing-toolsethttps://www.threatfabric.com/hubfs/Screenshot%202023-06-14%20at%2017.27.59.pngScreenshot 2023-06-14 at 17.27.59Screenshot 2023-06-14 at 17.27.59https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2011.27.32.pngScreenshot 2023-06-15 at 11.27.32Screenshot 2023-06-15 at 11.27.32https://www.threatfabric.com/hubfs/letscall-screen3.pngletscall-screen3letscall-screen3https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2010.57.48.pngScreenshot 2023-06-15 at 10.57.48Screenshot 2023-06-15 at 10.57.48https://www.threatfabric.com/hubfs/Screenshot%202023-06-20%20at%2012.54.07.pngScreenshot 2023-06-20 at 12.54.07Screenshot 2023-06-20 at 12.54.07https://www.threatfabric.com/hubfs/video_demo1.gifvideo_demo1video_demo1https://www.threatfabric.com/hubfs/Screenshot%202023-06-16%20at%2016.45.07.pngScreenshot 2023-06-16 at 16.45.07Screenshot 2023-06-16 at 16.45.07https://www.threatfabric.com/hubfs/letscall-screen2.pngletscall-screen2letscall-screen2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Screenshot%202023-06-14%20at%2016.28.35.pngScreenshot 2023-06-14 at 16.28.35Screenshot 2023-06-14 at 16.28.35https://www.threatfabric.com/hubfs/TF_Blog_Letscall.jpgTF_Blog_LetscallTF_Blog_Letscallhttps://www.threatfabric.com/hubfs/letscall-screen1.pngletscall-screen1letscall-screen1https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2014.26.06.pngScreenshot 2023-06-15 at 14.26.06Screenshot 2023-06-15 at 14.26.06https://www.threatfabric.com/hubfs/Screenshot%202023-06-14%20at%2016.35.38.pngScreenshot 2023-06-14 at 16.35.38Screenshot 2023-06-14 at 16.35.38https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2013.49.42-1.pngScreenshot 2023-06-15 at 13.49.42-1Screenshot 2023-06-15 at 13.49.42-1https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2012.30.18.pngScreenshot 2023-06-15 at 12.30.18Screenshot 2023-06-15 at 12.30.18https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/admin_menu.pngadmin_menuadmin_menuhttps://www.threatfabric.com/hubfs/Screenshot%202023-06-14%20at%2017.35.25.pngScreenshot 2023-06-14 at 17.35.25Screenshot 2023-06-14 at 17.35.25https://www.threatfabric.com/hubfs/Screenshot%202023-06-15%20at%2012.05.00.pngScreenshot 2023-06-15 at 12.05.00Screenshot 2023-06-15 at 12.05.00https://www.threatfabric.com/hubfs/letscall-screen5-1.pngletscall-screen5-1letscall-screen5-1https://www.threatfabric.com/hubfs/letscall-screen4.pngletscall-screen4letscall-screen4https://www.threatfabric.com/hubfs/Screenshot%202023-06-08%20at%2017.49.54%20cut.pngScreenshot 2023-06-08 at 17.49.54 cutScreenshot 2023-06-08 at 17.49.54 cuthttps://www.threatfabric.com/hubfs/Screenshot%202023-06-28%20at%2010.33.44.pngScreenshot 2023-06-28 at 10.33.44Screenshot 2023-06-28 at 10.33.44https://www.threatfabric.com/hubfs/Screenshot%202023-06-28%20at%2010.42.08.pngScreenshot 2023-06-28 at 10.42.08Screenshot 2023-06-28 at 10.42.08https://www.threatfabric.com/hubfs/letscall-screen6.pngletscall-screen6letscall-screen62023-07-07https://www.threatfabric.com/blogs/vishing-rat-fraud-vs-fraud-kill-chainhttps://www.threatfabric.com/hubfs/Screenshot%202024-03-26%20at%2009.44.50.pngScreenshot 2024-03-26 at 09.44.50Screenshot 2024-03-26 at 09.44.50https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_VishingRATFraud_Details.pngTF_CyberfraudKillchain_VishingRATFraud_DetailsTF_CyberfraudKillchain_VishingRATFraud_Detailshttps://www.threatfabric.com/hubfs/TF_CyberfraudKillchain_VishingRATFraud_FeaturedImage.pngTF_CyberfraudKillchain_VishingRATFraud_FeaturedImageTF_CyberfraudKillchain_VishingRATFraud_FeaturedImagehttps://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.51.20.pngScreenshot 2024-03-04 at 08.51.20Screenshot 2024-03-04 at 08.51.20https://www.threatfabric.com/hubfs/Screenshot%202024-03-04%20at%2008.52.04.pngScreenshot 2024-03-04 at 08.52.04Screenshot 2024-03-04 at 08.52.04https://www.threatfabric.com/hubfs/40185.png40185401852024-03-26https://www.threatfabric.com/blogs/fusion-fireside-18-how-fraud-fuels-human-trafficking-with-neil-gileshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_NeilGiles.jpgTF_FusionFireside_NeilGilesTF_FusionFireside_NeilGileshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2026-04-30https://www.threatfabric.com/blogs/anatsa-trojan-returns-targeting-europe-and-expanding-its-reachhttps://www.threatfabric.com/hubfs/Slide3-1.jpegSlide3-1Slide3-1https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_Anatsa_Blog2.pngTF_Anatsa_Blog2TF_Anatsa_Blog2https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide2-1.jpegSlide2-1Slide2-1https://www.threatfabric.com/hubfs/Slide4.jpegSlide4Slide42024-02-19https://www.threatfabric.com/blogs/blackrock_the_trojan_that_wanted_to_get_them_allhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/cover.webpcovercoverhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/lokibot_malware_family.pnglokibot_malware_familylokibot_malware_familyhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/overlay.pngoverlayoverlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/top15_targeted_countries.pngtop15_targeted_countriestop15_targeted_countrieshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/credentials_targets_per_category.pngcredentials_targets_per_categorycredentials_targets_per_categoryhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/cc_overlay.pngcc_overlaycc_overlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/cc_targets_per_category.pngcc_targets_per_categorycc_targets_per_categoryhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/blackrock/accessibility.pngaccessibilityaccessibility2023-06-16https://www.threatfabric.com/privacyhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2026-04-01https://www.threatfabric.com/partnershttps://www.threatfabric.com/hubfs/Threatfabric/images/fraud-ecosystem-minified.pngfraudecosystemminifiedfraudecosystemminifiedhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/TF_WebsiteAssets_Partners.pngTFWebsiteAssetsPartnersTFWebsiteAssetsPartners2025-01-13https://www.threatfabric.com/blogs/brokewell-do-not-go-broke-by-new-banking-malwarehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide2-4.pngSlide2-4Slide2-4https://www.threatfabric.com/hubfs/harry_tf_money_coins_in_well_miyazaki_style_drawing_of_water_we_0237f000-5c27-4a04-bb8c-864f66d32459.jpgharry_tf_money_coins_in_well_miyazaki_style_drawing_of_water_we_0237f000-5c27-4a04-bb8c-864f66d32459harry_tf_money_coins_in_well_miyazaki_style_drawing_of_water_we_0237f000-5c27-4a04-bb8c-864f66d32459https://www.threatfabric.com/hubfs/Slide3-Apr-17-2024-10-25-41-3370-PM.pngSlide3-Apr-17-2024-10-25-41-3370-PMSlide3-Apr-17-2024-10-25-41-3370-PMhttps://www.threatfabric.com/hubfs/Slide5-Apr-17-2024-10-25-40-6369-PM.pngSlide5-Apr-17-2024-10-25-40-6369-PMSlide5-Apr-17-2024-10-25-40-6369-PMhttps://www.threatfabric.com/hubfs/Slide1-Apr-17-2024-10-25-40-6370-PM.pngSlide1-Apr-17-2024-10-25-40-6370-PMSlide1-Apr-17-2024-10-25-40-6370-PMhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Slide4-Apr-17-2024-10-25-40-7838-PM.pngSlide4-Apr-17-2024-10-25-40-7838-PMSlide4-Apr-17-2024-10-25-40-7838-PM2024-04-25https://www.threatfabric.com/blogs/ghost-tap-new-cash-out-tactic-with-nfc-relayhttps://www.threatfabric.com/hubfs/image-png-Nov-12-2024-10-27-58-2276-AM.pngimage-png-Nov-12-2024-10-27-58-2276-AMimage-png-Nov-12-2024-10-27-58-2276-AMhttps://www.threatfabric.com/hubfs/TF_GhostTap_LOGO.jpgTF_GhostTap_LOGOTF_GhostTap_LOGOhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/MTI_NFC_relay_flow.pngMTI_NFC_relay_flowMTI_NFC_relay_flow2024-11-20https://www.threatfabric.com/blogs/a-multi-layered-approach-to-detecting-impersonation-scamshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_DetectingImpersonationScams.jpgTF_DetectingImpersonationScamsTF_DetectingImpersonationScamshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/20240924_Blog.jpg20240924_Blog20240924_Blog2024-09-25https://www.threatfabric.com/blogs/fusion-fireside-15-exploring-psd3-and-psr-with-frederik-menneshttps://www.threatfabric.com/hubfs/TF_FusionFireside_FrederikMennes.jpgTF_FusionFireside_FrederikMennesTF_FusionFireside_FrederikMenneshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852026-01-15https://www.threatfabric.com/resources/andromeda-the-latest-brazilian-dto-malwarehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/ontwerper_miyazaki_style_drawing_of_robot_creature_with_brazili_f71561c8-d394-4c4a-acbd-d5e586a99571.pngontwerpermiyazakistyledrawingofrobotcreaturewithbrazilif71561c8d3944c4aacbdd5e586a99571ontwerpermiyazakistyledrawingofrobotcreaturewithbrazilif71561c8d3944c4aacbdd5e586a99571https://www.threatfabric.com/hubfs/40185.png40185401852023-09-12https://www.threatfabric.com/blogs/threatfabric-appoints-rohan-mer-as-regional-account-directorhttps://www.threatfabric.com/hubfs/MicrosoftTeams-image%20(113).pngMicrosoftTeams-image (113)MicrosoftTeams-image (113)https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852024-02-09https://www.threatfabric.com/blogs/fraud-year-in-review-what-2025-taught-us-for-20262025-11-12https://www.threatfabric.com/blogs/malware-successfully-exploiting-bnpl-appshttps://www.threatfabric.com/hubfs/Threatfabric/images/screenshot-2022-09-07-at-22.01.07.pngscreenshot-2022-09-07-at-22.01.07screenshot-2022-09-07-at-22.01.07https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/tf_core_story_2022_chs_v1.6.025.jpegtf_core_story_2022_chs_v1.6.025tf_core_story_2022_chs_v1.6.025https://www.threatfabric.com/hubfs/40185.png40185401852023-03-03https://www.threatfabric.com/blogs/app-fraud-reimbursement-in-the-ukhttps://www.threatfabric.com/hubfs/APP%20Fraud%20Reimbursement%20in%20the%20UK.pngAPP Fraud Reimbursement in the UKAPP Fraud Reimbursement in the UKhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Why%20woud%20fraudster%20not%20return%20for%20round%20two.pngWhy woud fraudster not return for round twoWhy woud fraudster not return for round twohttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Victims%20still%20get%20paid.pngVictims still get paidVictims still get paidhttps://www.threatfabric.com/hubfs/Best%20message%20to%20victims.pngBest message to victimsBest message to victims2023-09-12https://www.threatfabric.com/blogs/toad-fraudhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/copybara.pngcopybaracopybarahttps://www.threatfabric.com/hubfs/Threatfabric/images/panel-1.pngpanel-1panel-1https://www.threatfabric.com/hubfs/Threatfabric/images/phishing.pngphishingphishinghttps://www.threatfabric.com/hubfs/Threatfabric/images/cover-1.jpgcover-1cover-1https://www.threatfabric.com/hubfs/Threatfabric/images/smsspy.pngsmsspysmsspyhttps://www.threatfabric.com/hubfs/Threatfabric/images/copybara_form.pngcopybara_formcopybara_formhttps://www.threatfabric.com/hubfs/Threatfabric/images/copybara_overlay.pngcopybara_overlaycopybara_overlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/toad.pngtoadtoadhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2023-06-16https://www.threatfabric.com/blogs/spynote-rat-targeting-financial-institutionshttps://www.threatfabric.com/hubfs/Threatfabric/images/TF-SpyNote-Statistical.pngTF-SpyNote-StatisticalTF-SpyNote-Statisticalhttps://www.threatfabric.com/hubfs/Threatfabric/images/TF-SpyNote-accessibility.pngTF-SpyNote-accessibilityTF-SpyNote-accessibilityhttps://www.threatfabric.com/hubfs/Threatfabric/images/spyware.pngspywarespywarehttps://www.threatfabric.com/hubfs/Threatfabric/images/cypherRat-Released-free.pngcypherRat-Released-freecypherRat-Released-freehttps://www.threatfabric.com/hubfs/Threatfabric/images/TF_SpyNote_Sales.pngTF_SpyNote_SalesTF_SpyNote_Saleshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/spyNote-Bank-Impersonation.pngspyNote-Bank-ImpersonationspyNote-Bank-Impersonationhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/spynote-capabilities.pngspynote-capabilitiesspynote-capabilitieshttps://www.threatfabric.com/hubfs/Threatfabric/images/spyNote-discovered-campaign.pngspyNote-discovered-campaignspyNote-discovered-campaign2023-06-27https://www.threatfabric.com/blogs/fusion-fireside-8-banking-security-and-nordic-collaboration-with-h%C3%A1kon-akerlundhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_HakonAkerlund.jpgTF_FusionFireside_HakonAkerlundTF_FusionFireside_HakonAkerlundhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2025-02-25https://www.threatfabric.com/blogs/threatfabric-recognized-by-gartner-as-cyber-fraud-fusion-kill-chain-vendorhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-09-15https://www.threatfabric.com/regions/menahttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/ThreatFabric_globe_view_middle_east_focus_mena_region_extreme_p_c1503f92-58c5-474b-a947-a49400a9bad7.jpgThreatFabric_globe_view_middle_east_focus_mena_region_extreme_p_c1503f92-58c5-474b-a947-a49400a9bad7ThreatFabric_globe_view_middle_east_focus_mena_region_extreme_p_c1503f92-58c5-474b-a947-a49400a9bad7https://www.threatfabric.com/hubfs/ShiftLeftOnFraud_FeaturedImage2.jpgShiftLeftOnFraud_FeaturedImage2ShiftLeftOnFraud_FeaturedImage2https://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabric_SocialCard-1ThreatFabric_SocialCard-1https://www.threatfabric.com/hubfs/TF_Patent2.jpgTF_Patent2TF_Patent2https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2026-07-22https://www.threatfabric.com/jobs/senior-javascript-researcher-engineerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-05-18https://www.threatfabric.com/blogs/threatfabric-announces-partnership-with-silobreaker-to-strengthen-mobile-threat-intelligencehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/PR-Threat-fabric-1-1.jpgPR-Threat-fabric-1-1PR-Threat-fabric-1-12025-03-11https://www.threatfabric.com/resources/voice-phishing-using-malwarehttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-05-23https://www.threatfabric.com/resources/basic-voice-phishinghttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/vulnerability-disclosure-policyhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852025-01-13https://www.threatfabric.com/blogs/threatfabric-appoints-eward-driehuis-as-vp-of-fraud-engineeringhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_Team_Eward.jpgTF_Team_EwardTF_Team_Ewardhttps://www.threatfabric.com/hubfs/40185.png40185401852023-09-15https://www.threatfabric.com/blogs/phantomcard-new-nfc-driven-android-malware-emerging-in-brazilhttps://www.threatfabric.com/hubfs/phantomcard-step-1.pngphantomcard-step-1phantomcard-step-1https://www.threatfabric.com/hubfs/phantomcard-step-3.pngphantomcard-step-3phantomcard-step-3https://www.threatfabric.com/hubfs/phantomcard-step-4.pngphantomcard-step-4phantomcard-step-4https://www.threatfabric.com/hubfs/Slide1-Aug-11-2025-04-27-58-3965-PM.pngSlide1-Aug-11-2025-04-27-58-3965-PMSlide1-Aug-11-2025-04-27-58-3965-PMhttps://www.threatfabric.com/hubfs/Slide3-Aug-11-2025-04-27-58-9509-PM.pngSlide3-Aug-11-2025-04-27-58-9509-PMSlide3-Aug-11-2025-04-27-58-9509-PMhttps://www.threatfabric.com/hubfs/TF_MTI_PhantomCard.jpgTF_MTI_PhantomCardTF_MTI_PhantomCardhttps://www.threatfabric.com/hubfs/phantomcard-step-2.pngphantomcard-step-2phantomcard-step-2https://www.threatfabric.com/hubfs/Slide6-Aug-12-2025-08-05-37-1219-AM.pngSlide6-Aug-12-2025-08-05-37-1219-AMSlide6-Aug-12-2025-08-05-37-1219-AMhttps://www.threatfabric.com/hubfs/Slide2-Aug-11-2025-04-27-58-5192-PM.pngSlide2-Aug-11-2025-04-27-58-5192-PMSlide2-Aug-11-2025-04-27-58-5192-PMhttps://www.threatfabric.com/hubfs/Slide5-Aug-11-2025-04-27-58-8937-PM.pngSlide5-Aug-11-2025-04-27-58-8937-PMSlide5-Aug-11-2025-04-27-58-8937-PMhttps://www.threatfabric.com/hubfs/regions.pngregionsregionshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/phantomcard-code-1.pngphantomcard-code-1phantomcard-code-1https://www.threatfabric.com/hubfs/phantomcard-code-2.pngphantomcard-code-2phantomcard-code-2https://www.threatfabric.com/hubfs/Slide4-Aug-11-2025-04-27-58-3299-PM.pngSlide4-Aug-11-2025-04-27-58-3299-PMSlide4-Aug-11-2025-04-27-58-3299-PM2025-08-14https://www.threatfabric.com/blogs/threatfabric-recognised-by-gartner-as-a-sample-vendor-for-emerging-tech-impact-radar-securityhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_Gartner_January2024.pngTF_Gartner_January2024TF_Gartner_January2024https://www.threatfabric.com/hubfs/40185.png40185401852024-01-15https://www.threatfabric.com/blogs/building-a-bullet-proof-external-financial-fraud-intelligence-programhttps://www.threatfabric.com/hubfs/Brent%20Whittington.pngBrent WhittingtonBrent Whittingtonhttps://www.threatfabric.com/hubfs/harry_tf_researcher_sitting_behind_desk_in_front_of_giant_glass_b54cab5e-4166-4c7e-9757-1aa42d2fe360.jpgharry_tf_researcher_sitting_behind_desk_in_front_of_giant_glass_b54cab5e-4166-4c7e-9757-1aa42d2fe360harry_tf_researcher_sitting_behind_desk_in_front_of_giant_glass_b54cab5e-4166-4c7e-9757-1aa42d2fe360https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852024-08-22https://www.threatfabric.com/blogs/inform-and-threatfabric-announce-collaboration-endorsed-by-rabobankhttps://www.threatfabric.com/hubfs/Inform_PartnershipAnnouncement_SOCIAL.jpgInform_PartnershipAnnouncement_SOCIALInform_PartnershipAnnouncement_SOCIALhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2025-09-02https://www.threatfabric.com/blogs/crocodilus-mobile-malware-evolving-fast-going-globalhttps://www.threatfabric.com/hubfs/facebook-ad-pl.pngfacebook-ad-plfacebook-ad-plhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_LightningWebinars_Blog.jpgTF_LightningWebinars_BlogTF_LightningWebinars_Bloghttps://www.threatfabric.com/hubfs/croco-goes-global.pngcroco-goes-globalcroco-goes-globalhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/crypto-regex.pngcrypto-regexcrypto-regex2025-06-03https://www.threatfabric.com/jobshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/image%20(1).pngimage1image12025-01-13https://www.threatfabric.com/blogs/android-droppers-the-silent-gatekeepers-of-malwarehttps://www.threatfabric.com/hubfs/App_Installed_Via_Dropper.mov/medium.jpgExample of app installation through dropper appExample of app installation through dropper apphttps://www.threatfabric.com/hubfs/App_Installed_Via_Dropper.mov24nonohttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/image-png-Aug-25-2025-07-24-00-6500-AM.pngimage-png-Aug-25-2025-07-24-00-6500-AMimage-png-Aug-25-2025-07-24-00-6500-AMhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/image-png-Aug-14-2025-07-36-03-8463-AM.pngimage-png-Aug-14-2025-07-36-03-8463-AMimage-png-Aug-14-2025-07-36-03-8463-AMhttps://www.threatfabric.com/hubfs/social-suggested-images/TF_AndroidDroppers2.jpgTF_AndroidDroppers2TF_AndroidDroppers2https://www.threatfabric.com/hubfs/App_blocked-2.pngApp_blocked-2App_blocked-2https://www.threatfabric.com/hubfs/image-png-Aug-22-2025-08-37-31-7983-AM.pngimage-png-Aug-22-2025-08-37-31-7983-AMimage-png-Aug-22-2025-08-37-31-7983-AM2025-08-27https://www.threatfabric.com/blogs/authentication-in-the-age-of-spoofed-biometricshttps://www.threatfabric.com/hubfs/image-png-Mar-21-2024-01-12-23-9751-PM.pngimage-png-Mar-21-2024-01-12-23-9751-PMimage-png-Mar-21-2024-01-12-23-9751-PMhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_HologramLaptop_16-9%20(1).pngTF_HologramLaptop_16-9 (1)TF_HologramLaptop_16-9 (1)2024-03-21https://www.threatfabric.com/blogs/bugdrop-new-dropper-bypassing-google-security-measureshttps://www.threatfabric.com/hubfs/Threatfabric/images/overlay.pngoverlayoverlayhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/bugDrop/poc.pngpocpochttps://www.threatfabric.com/hubfs/Threatfabric/images/group.pnggroupgrouphttps://www.threatfabric.com/hubfs/Threatfabric/images/panel-2.pngpanel-2panel-2https://www.threatfabric.com/hubfs/Threatfabric/images/cover%20(1)-1.pngcover (1)-1cover (1)-1https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/brox.pngbroxbroxhttps://www.threatfabric.com/hubfs/Threatfabric/images/pakistan.pngpakistanpakistanhttps://www.threatfabric.com/hubfs/Threatfabric/images/config.pngconfigconfighttps://www.threatfabric.com/hubfs/Threatfabric/images/error.pngerrorerror2023-06-16https://www.threatfabric.com/blogs/fusion-fireside-special-psr-edition-with-our-guest-chris-bonehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_ChrisBone.jpgTF_FusionFireside_ChrisBoneTF_FusionFireside_ChrisBone2024-10-31https://www.threatfabric.com/blogs/fusion-fireside-10-fusion-in-practice-with-senan-moloneyhttps://www.threatfabric.com/hubfs/TF_FusionFireside_SenanMoloney.jpgTF_FusionFireside_SenanMoloneyTF_FusionFireside_SenanMoloneyhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852025-05-15https://www.threatfabric.com/blogs/fusion-fireside-14-a-marine-in-cyber-with-john-fokkerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_JohnFokker.jpgTF_FusionFireside_JohnFokkerTF_FusionFireside_JohnFokkerhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2025-12-03https://www.threatfabric.com/blogs/new_android_trojan_targeting_over_60_banks_and_social_appshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_c2_server_address_code_snippet.webpnew_android_trojan_targeting_over_60_banks_and_social_apps_c2_server_address_code_snippetnew_android_trojan_targeting_over_60_banks_and_social_apps_c2_server_address_code_snippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_new_attack_vectors.webpnew_android_trojan_targeting_over_60_banks_and_social_apps_new_attack_vectorsnew_android_trojan_targeting_over_60_banks_and_social_apps_new_attack_vectorshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/codes.pngcodescodeshttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_salt_code_snippet.pngnew_android_trojan_targeting_over_60_banks_and_social_apps_salt_code_snippetnew_android_trojan_targeting_over_60_banks_and_social_apps_salt_code_snippethttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_twitter_handle_code_snippet.webpnew_android_trojan_targeting_over_60_banks_and_social_apps_twitter_handle_code_snippetnew_android_trojan_targeting_over_60_banks_and_social_apps_twitter_handle_code_snippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_red_alert_2.webpnew_android_trojan_targeting_over_60_banks_and_social_apps_red_alert_2new_android_trojan_targeting_over_60_banks_and_social_apps_red_alert_2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-android-trojan/new_android_trojan_targeting_over_60_banks_and_social_apps_forum_post_of_red_alert_actor_on_bot_update.webpnew_android_trojan_targeting_over_60_banks_and_social_apps_forum_post_of_red_alert_actor_on_bot_updatenew_android_trojan_targeting_over_60_banks_and_social_apps_forum_post_of_red_alert_actor_on_bot_update2023-06-16https://www.threatfabric.com/blogs/anatsa-targets-north-america-uses-proven-mobile-campaign-processhttps://www.threatfabric.com/hubfs/undefined-3.pngundefined-3undefined-3https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/TF_Anatsa_BlogUSA.jpgTF_Anatsa_BlogUSATF_Anatsa_BlogUSA2025-07-08https://www.threatfabric.com/blogs/fusion-fireside-13-insights-from-the-frontlines-of-security-with-keith-gordonhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_KeithGordon.jpgTF_FusionFireside_KeithGordonTF_FusionFireside_KeithGordonhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2025-10-21https://www.threatfabric.com/blogs/fusion-fireside-5-the-art-of-fusion-with-jake-norwoodhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/TF_FusionFireside_JakeNorwood.jpgTF_FusionFireside_JakeNorwoodTF_FusionFireside_JakeNorwoodhttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2024-11-07https://www.threatfabric.com/resources/fraud-by-malwarehttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/mtihttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/2-1-enrichment-of-iocs.png21enrichmentofiocs21enrichmentofiocshttps://www.threatfabric.com/hubfs/MTI_Portal2.pngMTIPortal2MTIPortal2https://www.threatfabric.com/hubfs/2-2-enrichment-of-iocs.png22enrichmentofiocs22enrichmentofiocshttps://www.threatfabric.com/hubfs/3-RFIs.png3RFIs3RFIshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolighthttps://www.threatfabric.com/hubfs/harry_tf_a_business_man_walking_through_a_tunnel_of_hope_in_a_c_9ee25930-a27b-4992-b321-1bae54c8bacc-topaz-standard%20v2-3840w.jpgharrytfabusinessmanwalkingthroughatunnelofhopeinac9ee25930a27b4992b3211bae54c8bacctopazstandardv23840wharrytfabusinessmanwalkingthroughatunnelofhopeinac9ee25930a27b4992b3211bae54c8bacctopazstandardv23840whttps://www.threatfabric.com/hubfs/TF_WebsiteAssets_MTI_Integrations.pngTFWebsiteAssetsMTIIntegrationsTFWebsiteAssetsMTIIntegrationshttps://www.threatfabric.com/hubfs/ThreatFabric_SocialCard-1.pngThreatFabricSocialCard1ThreatFabricSocialCard1https://www.threatfabric.com/hubfs/1-indicators-of-compromise.png1indicatorsofcompromise1indicatorsofcompromise2026-06-15https://www.threatfabric.com/blogs/anatsa-hits-uk-and-dach-with-new-campaignhttps://www.threatfabric.com/hubfs/dropper.jpegdropperdropperhttps://www.threatfabric.com/hubfs/targets_us.jpgtargets_ustargets_ushttps://www.threatfabric.com/hubfs/anatsa_capabilities.jpeganatsa_capabilitiesanatsa_capabilitieshttps://www.threatfabric.com/hubfs/targeted_countries.jpegtargeted_countriestargeted_countrieshttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/anatsa_samples.jpeganatsa_samplesanatsa_sampleshttps://www.threatfabric.com/hubfs/timeline.jpgtimelinetimelinehttps://www.threatfabric.com/hubfs/killchain.jpegkillchainkillchainhttps://www.threatfabric.com/hubfs/cover-3.pngcover-3cover-3https://www.threatfabric.com/hubfs/40185.png40185401852023-06-26https://www.threatfabric.com/blogs/fusion-fireside-1-navigating-the-payment-pathways-with-daniel-van-delfthttps://www.threatfabric.com/hubfs/TF_FusionFireside_Announcement3.pngTF_FusionFireside_Announcement3TF_FusionFireside_Announcement3https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/40185.png40185401852026-05-20https://www.threatfabric.com/blogs/banking_malware_in_google_play_targeting_many_new_appshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/banking-malware/banking_malware_in_google_play_targeting_many_new_apps_additional_google_play_app_info.pngbanking_malware_in_google_play_targeting_many_new_apps_additional_google_play_app_infobanking_malware_in_google_play_targeting_many_new_apps_additional_google_play_app_infohttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/banking-malware/banking_malware_in_google_play_targeting_many_new_apps_collection_of_overlays.webpbanking_malware_in_google_play_targeting_many_new_apps_collection_of_overlaysbanking_malware_in_google_play_targeting_many_new_apps_collection_of_overlayshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/banking-malware/banking_malware_in_google_play_targeting_many_new_apps_funny_videos_2017_app_in_google_play.webpbanking_malware_in_google_play_targeting_many_new_apps_funny_videos_2017_app_in_google_playbanking_malware_in_google_play_targeting_many_new_apps_funny_videos_2017_app_in_google_playhttps://www.threatfabric.com/hubfs/40185.png40185401852023-05-23https://www.threatfabric.com/blogs/the-rise-of-raton-from-nfc-heists-to-remote-control-and-atshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr15.pngscr15scr15https://www.threatfabric.com/hubfs/TF_MTI_RatOn-01.jpgTF_MTI_RatOn-01TF_MTI_RatOn-01https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr12.pngscr12scr12https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr8.pngscr8scr8https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr2.pngscr2scr2https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr1_cut.pngscr1_cutscr1_cuthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/nf4.pngnf4nf4https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr7.pngscr7scr7https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr13.pngscr13scr13https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr5.pngscr5scr5https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr10.pngscr10scr10https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr3.pngscr3scr3https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr4.pngscr4scr4https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr11.pngscr11scr11https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr9.pngscr9scr9https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/nf3.pngnf3nf3https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr6.pngscr6scr6https://www.threatfabric.com/hubfs/Threatfabric/images/blog/Raton/scr14_edit.pngscr14_editscr14_edit2025-09-09https://www.threatfabric.com/blogs/fusion-fireside-17-inside-the-chinese-smishing-triad-with-gary-warnerhttps://www.threatfabric.com/hubfs/TF_FusionFireside_GaryWarner.jpgTF_FusionFireside_GaryWarnerTF_FusionFireside_GaryWarnerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-light2026-03-18https://www.threatfabric.com/blogs/droppers-bypassing-android-13-restrictionshttps://www.threatfabric.com/hubfs/Slide5-4.pngSlide5-4Slide5-4https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Slide6-4.pngSlide6-4Slide6-4https://www.threatfabric.com/hubfs/Slide4-Oct-25-2023-01-17-13-1314-PM.pngSlide4-Oct-25-2023-01-17-13-1314-PMSlide4-Oct-25-2023-01-17-13-1314-PMhttps://www.threatfabric.com/hubfs/Slide7-1.pngSlide7-1Slide7-1https://www.threatfabric.com/hubfs/SecuriDropper-1.pngSecuriDropper-1SecuriDropper-1https://www.threatfabric.com/hubfs/TF_SecuriDropper_Social.jpgTF_SecuriDropper_SocialTF_SecuriDropper_Socialhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Slide1-3.pngSlide1-3Slide1-3https://www.threatfabric.com/hubfs/SecuriDropper2.pngSecuriDropper2SecuriDropper22023-11-07https://www.threatfabric.com/blogs/new-campaigns-spread-banking-malware-through-google-playhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_lamp_for_darkness.pngnew_campaigns_spread_banking_malware_through_google_play_lamp_for_darknessnew_campaigns_spread_banking_malware_through_google_play_lamp_for_darknesshttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_tornado_flashlight.pngnew_campaigns_spread_banking_malware_through_google_play_tornado_flashlightnew_campaigns_spread_banking_malware_through_google_play_tornado_flashlighthttps://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabric-logo-lightthreatfabric-logo-lighthttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_malware_installation_routine_code_snippet.pngnew_campaigns_spread_banking_malware_through_google_play_malware_installation_routine_code_snippetnew_campaigns_spread_banking_malware_through_google_play_malware_installation_routine_code_snippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_bankbot_dropper_detected_by_client_side_detection.pngnew_campaigns_spread_banking_malware_through_google_play_bankbot_dropper_detected_by_client_side_detectionnew_campaigns_spread_banking_malware_through_google_play_bankbot_dropper_detected_by_client_side_detectionhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_unknown_sources_disabled_install_is_blocked.pngnew_campaigns_spread_banking_malware_through_google_play_unknown_sources_disabled_install_is_blockednew_campaigns_spread_banking_malware_through_google_play_unknown_sources_disabled_install_is_blockedhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_bankbot_dropper_on_google_play.webpnew_campaigns_spread_banking_malware_through_google_play_bankbot_dropper_on_google_playnew_campaigns_spread_banking_malware_through_google_play_bankbot_dropper_on_google_playhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_spider_solitare.pngnew_campaigns_spread_banking_malware_through_google_play_spider_solitarenew_campaigns_spread_banking_malware_through_google_play_spider_solitarehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_unknown_sources_enabled_user_has_to_acknowledge_the_install.webpnew_campaigns_spread_banking_malware_through_google_play_unknown_sources_enabled_user_has_to_acknowledge_the_installnew_campaigns_spread_banking_malware_through_google_play_unknown_sources_enabled_user_has_to_acknowledge_the_installhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_collaboration.pngnew_campaigns_spread_banking_malware_through_google_play_collaborationnew_campaigns_spread_banking_malware_through_google_play_collaborationhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_xdc_cleaner.pngnew_campaigns_spread_banking_malware_through_google_play_xdc_cleanernew_campaigns_spread_banking_malware_through_google_play_xdc_cleanerhttps://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_installed_apps_list.pngnew_campaigns_spread_banking_malware_through_google_play_installed_apps_listnew_campaigns_spread_banking_malware_through_google_play_installed_apps_listhttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_classic_solitaire.pngnew_campaigns_spread_banking_malware_through_google_play_classic_solitairenew_campaigns_spread_banking_malware_through_google_play_classic_solitairehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_solitaire.pngnew_campaigns_spread_banking_malware_through_google_play_solitairenew_campaigns_spread_banking_malware_through_google_play_solitairehttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_get_device_admin_and_download_malware_after_2_hours_code_snippet.webpnew_campaigns_spread_banking_malware_through_google_play_get_device_admin_and_download_malware_after_2_hours_code_snippetnew_campaigns_spread_banking_malware_through_google_play_get_device_admin_and_download_malware_after_2_hours_code_snippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_only_start_dropper_functionality_when_target_is_available_code_snippet.pngnew_campaigns_spread_banking_malware_through_google_play_only_start_dropper_functionality_when_target_is_available_code_snippetnew_campaigns_spread_banking_malware_through_google_play_only_start_dropper_functionality_when_target_is_available_code_snippethttps://www.threatfabric.com/hubfs/Threatfabric/images/blog/new-campaigns/new_campaigns_spread_banking_malware_through_google_play_no_detections_by_play_protect.pngnew_campaigns_spread_banking_malware_through_google_play_no_detections_by_play_protectnew_campaigns_spread_banking_malware_through_google_play_no_detections_by_play_protect2023-03-03https://www.threatfabric.com/resources/the-state-of-android-banking-malware-insights-from-2022-and-predictions-for-2023https://www.threatfabric.com/hubfs/40185.png4018540185https://www.threatfabric.com/hubfs/Threatfabric/logos/threatfabric-logo-light.svgthreatfabriclogolightthreatfabriclogolight2023-08-24