Android Banking Droppers Surge as Malware Operators Change Packaging Tactics

Android Banking Droppers Surge as Malware Operators Change Packaging Tactics

Android banking malware operators are increasingly relying on dropper-based packaging to evade mobile app-store controls, shifting how threats are classified and delivered rather than simply expanding their overall distribution. Kaspersky telemetry for the second quarter of 2026 recorded 1,996,823 blocked attacks involving malware, adware, and potentially unwanted mobile software, down from 2,676,328 in Q1. Yet the apparent decline obscures a si…

Google Play Apps Use Stealth Loaders to Deliver Anatsa Banking Malware

Android users are facing a fresh reminder that a familiar app-store listing can hide a financial threat. Researchers have observed malicious loaders on Google Play that can prepare the ground for Anatsa, an Android banking Trojan designed to put account access at risk. The campaign does not rely on an obvious malicious download at first. Instead, a seemingly useful app, including a trojanized PDF reader, shows a fake update prompt after it is op…