Android malware, Android malware and more Android malware

This report summarizes Kaspersky private crimeware findings on Android threats in 2023, describing three Android malware families: Tambir (Turkish-targeting backdoor/spyware using accessibility abuse and C2 retrieval via public channels), Dwphon (preinstalled-like component possibly introduced via supply-chain affecting OEM devices and collecting system/app data), and Gigabud (Kotlin-based RAT targeting banking users with credential theft, screen streaming, and accessibility-based 2FA bypass). The report includes capabilities, observed telemetry, and multiple sample hashes as indicators of compromise, and recommends avoiding unofficial app stores and monitoring app permissions.