KYCShadow: An Android Banking Malware Exploiting Fake KYC Workflows for Credential and OTP Theft

Reported 29 Apr 2026 by otx · Severity: medium

An Android malware campaign masquerading as a bank KYC verification application targets users in India through WhatsApp distribution. The threat operates as a multi-stage dropper installing secondary payloads while establishing persistent command-and-control communication. It com