Malware
Zombinder
- First Reported
- Dec 21, 2023
- Latest Reported
- Sep 30, 2025
Reported Context (3)
- During our research, we observed cases where Datzbro was directly installed on devices, as well as cases where a dropper bypassing Android 13+ restrictions - namely Zombinder - was used. Datzbro Android Trojan Uses Senior Travel Scams to Enable Device Takeover and Financial Fraud
- We’ve seen similar techniques in multiple droppers such as Zombinder, BrokewellDropper, HiddenCatDropper tied to banking malware, and TiramisuDropper, Zombinder in distributing SpyNote samples, especially those Android Droppers Adapt to Evade Google Play Protect’s Pilot Program
- In line with our earlier research (see also our SecuriDropper blog), during this investigation we were able to track and analyze samples related to the updated Zombinder. Updated Chameleon Android Trojan Uses Accessibility to Bypass Biometric Prompts
Malware (10)
MITRE ATT&CK (15)
Vendors (1)
Products (5)
Countries (11)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.