Malware
OverlayPhantom
- First Reported
- May 28, 2026
- Latest Reported
- May 28, 2026
Reported Context (1)
- Cyble’s CRIL identified OverlayPhantom, a new Android banking trojan distributed through malicious URLs that impersonate trusted apps such as ID Austria and TikTok. OverlayPhantom Android Trojan Uses Accessibility Abuse to Steal Banking Credentials
MITRE ATT&CK (11)
Products (4)
Industries (3)
Countries (10)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.