Elaborate Scam App Impersonates Leading Asian Bank; Victims Duped into ‘Investing’

Zimperium and a partnered Asian bank uncovered an active scam campaign involving a fake mobile app that impersonates a major bank to lure users into a fabricated cryptocurrency trading platform; victims register, interact with attacker-controlled servers (including a customer-support chat), and are prompted to “recharge” funds via online payments or crypto transfers, resulting in dozens of victims losing an average of $1,500 each. The app was first seen on VirusTotal in December 2020 and remains undetected by AV vendors, with C2 servers still operational and the campaign expanding to target an additional bank.