Malvertising on Meta Serves Android Users a Crypto-Stealing Trojan

Threat actors are leveraging Meta ad platforms to distribute fake TradingView Android apps that deliver the Brokewell trojan. Brokewell abuses Android accessibility permissions to steal credentials, intercept 2FA codes, drain crypto wallets, and grant attackers remote control, illustrating how mobile malvertising has become an effective channel for sophisticated financial malware.