Kaspersky Identifies Three New Android Malware Threats

Kaspersky researchers disclosed three Android malware families—Tambir (IPTV-disguised spyware active in Turkey), Dwphon (bundled as a system update component targeting devices from Chinese OEMs, observed in the Russian market), and Gigabud (banking- and fake-loan malware active since mid‑2022 across Southeast Asia and beyond)—that steal credentials and personal data, record screens and mimic user input to bypass 2FA, download and manage apps, and use C2 channels such as Telegram; the report includes regional targeting, links to known trojans (Triada), and recommendations to use official app stores, review permissions, update software, and use mobile security tools.