New RemControl Android banking malware targets users in Europe and Canada

A new Android malware-as-a-service (MaaS) platform named RemControl is targeting users in Europe, Canada, and the Middle East through malvertising campaigns impersonating the TVTap IPTV app. The malware uses phishing overlays to steal banking credentials, leverages Accessibility Services for persistent access, and can stream real-time UI data to attackers. It communicates with C2 servers via Telegram channels and uses a VPN service to bypass Google Play Protect checks.

AI-extracted · verify before operational use