Anatsa

Reported Context (7)

Well‑documented banking trojans such as Anatsa (and dozens of later families) demonstrate a repeatable pattern: benign app publication, delayed weaponisation, selective targeting, and cyclical activity designed to evade Why Fraud Controls Miss Mobile Malware on Trusted Devices
2. Android malware Anatsa infiltrates Google Play to target US banks – Bleeping Computer July Cybersecurity Roundup: Ransomware Actions, Malware Campaigns and Arrests
ThreatFabric researchers have identified a new campaign involving the Anatsa Android banking trojan, which is now targeting users in North America. Anatsa Banking Trojan Targets North American Users Through Google Play App
threat landscape has been shaped over the years by well-established banking Trojan families such as Anatsa, Octo, Hook, each evolving to introduce new techniques for evading detection and maximising financial Crocodilus Android Banking Trojan Steals Credentials, OTPs and Crypto Wallet Seed Phrases
Figure: timeline example of “Anatsa” nurturing multiple apps Epic-Google Ruling Could Increase Mobile Malware Risks, ThreatFabric Warns

Malware (14)

People (1)

Threat Actors (2)

MITRE ATT&CK (21)

Vendors (3)

Products (7)

Industries (3)

Countries (13)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.