Russia arrests three for allegedly creating Mamont malware, tied to over 300 cybercrimes

Russian authorities arrested three suspects accused of developing the Mamont Android banking trojan, which is linked to more than 300 incidents. Mamont is distributed via Telegram (disguised as apps, videos, or order trackers), enables theft by abusing SMS-based banking (exfiltrating transaction messages and routing funds to attacker-controlled numbers and wallets), can collect device and financial message data, and spread to contacts; the activity has prompted proposed Russian legislation to restrict SMS sending during calls.