CYFIRMA Research

CYFIRMA Research- Lazarus Stealer

CYFIRMA

CYFIRMA research exposes Lazarus Stealer — a stealthy Android banking malware targeting Russian financial institutions.

 Key Attack Vectors:

  • Overlay Attack: Displays fake banking login screens to steal card details & account credentials.
  • Silent SMS Notification Blocking: Obtains default SMS handler rights to suppress OTP alerts from the victim’s view.
  • Real-Time OTP Harvesting: Captures verification codes instantly to bypass multi-factor authentication.
  • Covert C2 Communication: Sends stolen data to attacker-controlled servers.

Link to the Research Report: https://www.cyfirma.com/research/lazarus-stealer-android-malware-for-russian-bank-credential-theft-through-overlay-and-sms-manipulation/

#AndroidMalware #BankingTrojan #OverlayAttack #SMSInterception #OTPTheft #CyberThreatIntel #MobileSecurity #CYFIRMAResearch #CYFIRMA #ETLM #ExternalThreatLandscapeManagement 

https://www.cyfirma.com/