logo

Godfather Malware Returns: Targeting Banking Users And Online Security

ID: eb4cd7eb-67b4-574f-a81e-cdd0f584b254

STIX ID: report--eb4cd7eb-67b4-574f-a81e-cdd0f584b254

Feed Name: Cyble Blog

Threat Score
75/100

Date Published: 2025-11-26

Date Updated: 2026-07-17

...
...

**GodFather Android banking trojan disguised as a MYT Müzik app targets Turkish users**, harvesting SMS and device data, performing USSD-based money transfers, keylogging, screen control via VNC, call forwarding, and injecting phishing overlays; the report includes APK metadata, many SHA256 hashes as IOCs, a Telegram-based C2 channel, detailed permission/manifest analysis, code snippets of functionality, command list, and remediation recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.