New Android Malware Targets Chinese Crypto Users

New Enchant Android malware is distributed via fake adult websites and leverages Android Accessibility Service to target Chinese cryptocurrency users, harvesting mnemonics, private keys, wallet passwords, addresses and asset details from specific wallet apps (imToken, OKX, Bitpie, TokenPocket); the report provides technical analysis, C2 URLs (https://bat.xnxnxx.top), sample hashes, MITRE ATT&CK mappings, IOCs and mitigation recommendations.