Threats Tagged 'vnc'

Octagon is a newly identified Android malware-as-a-service bot discovered in June 2026, targeting cryptocurrency wallets, exchanges, and banking applications. It uses accessibility overlays, hidden VNC, SMS interception, unlock-pattern capture, and balance reading to steal credentials and control infected devices remotely. Distributed via sideloaded APKs bypassing restricted settings, Octagon connects devices to a Windows command-and-control panel for real-time monitoring and manipulation. The malware maintains persistence through multiple mechanisms and evades detection by appearing benign to security scans. It has been observed using lures such as the Lifted Dreams game and Bahrain government-themed bait. Octagon specifically targets apps like Trust Wallet, Binance, MEXC, MetaMask, Telegram, and WhatsApp to facilitate cryptocurrency theft and account takeover.