PixPirate Android Banking Trojan Using New Evasion Tactic to Target Brazilian Users

The report describes active financial fraud campaigns in Latin America: PixPirate, an Android banking trojan targeting Brazil, now uses a technique that omits launcher intents to hide its icon while a downloader and droppee cooperate to run and persist via exported services and receivers, enabling covert theft of credentials, SMS interception, keystroke capture, and unauthorized PIX transfers; separately, Fakext abused a rogue Microsoft Edge extension (SATiD) to perform web injections and overlays to steal banking credentials across multiple LATAM banks.