PixRevolution Malware Hijacks Brazil's PIX Transfers in Real Time

A newly discovered Android banking trojan called PixRevolution targets Brazil's widely used PIX instant-payment system by abusing accessibility permissions to monitor screens, streaming those screens to remote operators, detecting payment activity, and briefly overlaying a fake loading screen while replacing the recipient's payment key so funds are redirected; it spreads via fraudulent download pages impersonating legitimate apps and poses a high-impact threat given PIX's large user base and irreversible transactions.