logo

Cron has fallen

ID: afad9015-a36f-5616-bc9c-e848ed5fc2fa

STIX ID: report--afad9015-a36f-5616-bc9c-e848ed5fc2fa

Feed Name: Group-IB Blog

Threat Score
78/100

Date Published: 2016-01-13

Date Updated: 2026-04-27

...
...

**Cron Android banking Trojan campaign:** The report describes a large-scale criminal operation (Cron) that used Android Trojans (cron/cronbot and later rented Tiny.z) to intercept SMS, hide bank messages, perform web injections and automate fraudulent transfers from victims' mobile banking accounts—infecting over 1 million devices, averaging ~3,500 new infections per day, and causing approximately $800,000 in documented losses before members were arrested in late 2016.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.