Trojanized And Pirated Assassins Creed App

Research identified an Android Trojan packaged as a pirated Assassin's Creed app that covertly harvests SMS messages (including messages targeting Russian bank numbers), collects device identifiers (phone number and Subscriber ID), can send multi-part SMS, and exfiltrates data to AES-encrypted command-and-control servers (bnk7ihekqxp.net and googleapiserver.net). The app hides its icon after installation and schedules regular callbacks to the C2, enabling persistent data theft and potential financial fraud; users are advised to avoid pirated apps and install only from trusted sources.