New Android malware found, deVixor can ransom

A new Android malware deVixor has been found that comes with the ransom ability.

Malware and the Android operating system are an indispensable combination of so-called levels. Since Android is an open system, it is easy to develop malware, but malware on this system has evolved so far that it has a level of ability that not all users can underestimate.

According to a report by the website, SCWorld has mentioned the detection of a malware type that remotely controls the victim's machine, or a RAT (Remote Access Trojan) with the ability of victim ransom type malware, or Ransomware mixed in. This malware, named deVixor, is a malware that has been activated since October 2025 (2025) in Iran, focusing on a group of users of banking services through a fraudulent website disguised as a trading site or car-related service.

Examining more than 700 examples of such malware, the malware was found to have a Bot on the famous chat service Telegram in use as a C2 or Command and Control system, allowing the malware to be updated quickly. This malware started as SMS or Short Message Service as a RAT type of malware that uses Firebase to receive commands from bots on Telegram.

The ability of this malware can be called scary because it ranges from the ability to steal data such as Keylogging, Accessibility Mode, JavaScript to create fake bank pages, and most importantly, Ransomware ability to lock the victim's machine and intimidate the victim into making cryptokerrency payments to unlock the machine. It also has the ability to steal data from OTP or One Time Password, credit card code, notification data on the victim's machine. And the money in the victim's bank account.

# Trending # Lemon 8 Howtoo # lemon 8 diary # it # freedomhack