Threat intelligence experts have uncovered a new Android banking trojan named BlankBot that poses a significant risk to user data security. This malicious software is designed to capture sensitive information such as SMS text messages, banking details, and even device lock patterns or PIN codes. What makes BlankBot particularly dangerous is its ability to evade detection by most antivirus programs.
Initially targeting users in Turkey, BlankBot was first identified by researchers on July 24. The trojan is still in active development, with a range of malicious capabilities including customer injections, keylogging, screen recording, and communication with a control server over a WebSocket connection.
