MasterFred Uses Gymdrop To Distribute Xenomorph Trojan

This report analyzes MasterFred, an Android hostile downloader disguised as a QR scanner that uses the Gymdrop dropper to download the Xenomorph banking trojan; it documents the infection chain (including Onion/C2 and download URLs), malicious capabilities (accessibility abuse to auto-enable permissions and device admin, SMS capture, HTML overlay phishing), attribution to Hadoken Security, and provides hashes and URLs as IOCs alongside mitigation recommendations.