Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets

Six new Android malware families targeting financial apps, payment platforms, and crypto wallets have been discovered by cybersecurity researchers.

• •PixRevolution hijacks Brazil's Pix instant transfers in real-time via fake overlays and MediaProjection API, routing funds to attackers
• •BeatBanker uses an audio loop persistence mechanism, Monero mining, and wallet overlays to steal USDT from Binance and Trust Wallet
• •TaxiSpy RAT targets Russian banking and crypto apps using XOR obfuscation and WebSocket-based VNC-like remote control
• •Mirax and Oblivion are MaaS offerings with automated permission bypass across Samsung, Xiaomi, OPPO, and OnePlus devices
• •SURXRAT integrates an LLM module and ransomware-style screen locker, sold via Telegram by an Indonesian threat actor