Canis C2 Exposed: Previously Undocumented Cross-Platform ...

Reported 08 Apr 2026 by otx · Severity: medium

On March 19, a researcher on X posted a suspicious Android APK tied to a phishing page impersonating Paidy, a Japanese buy-now-pay-later service. A quick look at the infrastructure behind it revealed an unauthenticated API sitting wide open, with endpoints exposing payloads, comm