Product
Play Integrity
- First Reported
- Oct 14, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (3)
- replacements embed a hooking engine to blind signature, accessibility, screen-capture, and Play Integrity checks from within the app. The replacement targets eight Indonesian apps. Hirudo Android Banking Trojan Replaces Apps to Bypass Built-In Security Checks
- Eight Indonesian banking apps, covering seven banks, have purpose-built replacements that embed a hooking engine to blind signature, Accessibility, screen-capture and Play Integrity checks from within the app. Hirudo Android Banking RAT Replaces Banking Apps With Patched Copies
- Researchers identified malicious copies of eight banking apps that use a hooking engine to bypass app-signature, Accessibility, and Play Integrity checks by substituting certificate information or returning empty lists. Hirudo Android Malware Replaces Banking Apps to Evade Security Checks
Malware (2)
People (1)
MITRE ATT&CK (4)
Products (3)
Tools (4)
Industries (1)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.