DeVixor: An Evolving Android Banking RAT With Ransomware Capabilities Targeting Iran - Cyble

Cyble has analyzed deVixor, an evolving Android banking RAT targeting Iranian users with capabilities including SMS harvesting, credential theft via JavaScript injection, and ransomware, distributed through phishing websites.