Technology
New Android malware can empty your bank account in seconds
NEWYou can now listen to Fox News articles!
Android users have been dealing with a steady rise in financial malware for years. Threats like Hydra, Anatsa and Octo have shown how attackers can take over a phone, read everything on the screen and drain accounts before you even notice anything wrong. Security updates have helped slow some of these strains, but malware authors keep adapting with new tricks.
The latest variant spotted in circulation is one of the most capable yet. It can silence your phone, take screenshots of banking apps, read clipboard entries, and even automate crypto wallet transactions. This threat is now known as Android BankBot YNRK, and it is far more advanced than typical mobile malware.
Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter
How the malware infiltrates devices
HOW ANDROID MALWARE LETS THIEVES ACCESS YOUR ATM CASH
Android banking malware is getting harder to spot as attackers use new tricks to take over phones and drain accounts. (Thomas Trutschel/Photothek via Getty Images)
BankBot YNRK hides inside fake Android apps that appear legitimate when installed. In the samples analyzed by researchers at Cyfirma, the attackers used apps that impersonated official digital ID tools. Once installed, the malware begins profiling the device by collecting details such as brand, model and installed apps. It checks whether the device is an emulator to avoid automated security analysis. It also maps known models to screen resolutions, which helps it tailor its behavior to specific phones.
To blend in, the malware can disguise itself as Google News. It does this by changing its app name and icon, then loading the real news.google.com site inside a WebView. While the victim believes the app is genuine, the malware quietly runs its background services.
One of its first actions is to mute audio and notification alerts. This prevents victims from hearing incoming messages, alarms or calls that could signal unusual account activity. It then requests access to Accessibility Services. If granted, this allows the malware to interact with the device interface just like a user. From that point onward, it can press buttons, scroll through screens and read everything displayed on the device.
BankBot YNRK also adds itself as a Device Administrator app. This makes it harder to remove and helps it restart itself after a reboot. To maintain long-term access, it schedules recurring background jobs that relaunch the malware every few seconds as long as the phone is connected to the internet.
What does the malware steal
Once the malware receives commands from its remote server, it gains near-complete control of the phone. It sends device information and installed app lists to the attackers, then receives a list of financial apps it should target. This list includes major banking apps used in Vietnam, Malaysia, Indonesia and India, along with several global cryptocurrency wallets.
With Accessibility permissions enabled, the malware can read everything shown on the screen. It captures UI metadata such as text, view IDs and button positions. This helps it reconstruct a simplified version of any app’s interface. Using this data, it can enter login details, swipe through menus or confirm transfers. It can also set text inside fields, install or remove apps, take photos, send SMS, turn call forwarding on and open banking apps in the background while the screen appears inactive.
In cryptocurrency wallets, the malware acts like an automated bot. It can open apps such as Exodus or MetaMask, read balances and seed phrases, dismiss biometric prompts, and carry out transactions. Because all actions happen through Accessibility, the attacker never needs your passwords or PINs. Anything visible on the screen is enough.
The malware also monitors the clipboard, so if users copy OTPs, account numbers or crypto keys, the data is immediately sent to the attackers. With call forwarding enabled, incoming bank verification calls can be silently redirected. All of these actions happen within seconds of the malware activating.
BankBot YNRK hides inside fake apps that look legitimate, then disguises itself as Google News while it runs in the background. (AP Photo/Don Ryan, File)
7 steps you can take to stay safe from banking malware
Banking trojans are getting harder to spot, but a few simple habits can reduce the chances of your phone getting compromised. Here are seven practical steps that help you stay protected.
FBI WARNS OVER 1 MILLION ANDROID DEVICES HIJACKED BY MALWARE
1) Install strong antivirus software
Strong antivirus software helps catch trouble early by spotting suspicious behavior before it harms your Android device or exposes your data. It checks apps as you install them, alerts you to risky permissions and blocks known malware threats. Many top antivirus options also scan links and messages for danger, which adds an important layer of protection when scams move fast.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
2) Use a data-removal service to shrink your digital footprint
Data brokers quietly collect and sell your personal details, which helps scammers target you with more convincing attacks. A reputable data-removal service can find and delete your information from dozens of sites so that criminals have less to work with. This reduces spam, phishing attempts and the chances of ending up on a malware attack list.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com
3) Install apps only from trusted sources
Avoid downloading APKs from random websites, forwarded messages or social media posts. Most banking malware spreads through sideloaded apps that look official but contain hidden code. The Play Store is not perfect, but it offers scanning, app verification and regular take-downs that greatly reduce the risk of installing infected apps.
4) Keep your device and apps updated
System updates often patch security issues that attackers exploit to bypass protections. Updating your apps is just as important, since outdated versions may contain weaknesses. Turn on automatic updates so that your device stays protected without you having to check manually.
5) Use a strong password manager
A password manager helps you create long, unique passwords for every account. It also saves you from typing passwords directly into apps, which reduces the chance of malware capturing them from your clipboard or keystrokes. If one password gets exposed, the rest of your accounts remain safe.
Next, see if your email has been exposed in past breaches. Our No. 1 password manager (see Cyberguy.com) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Once active, the malware can read your screen, steal financial data, automate crypto transfers and intercept OTPs within seconds. (Kurt “CyberGuy” Knutsson)
Check out the best expert-reviewed password managers of 2025 at Cyberguy.com
6) Enable two-factor authentication wherever possible
2FA adds a confirmation step through an OTP, authenticator app or hardware key. Even if attackers steal your login details, they still need this second step to get in. It cannot stop malware that takes over your device, but it significantly limits how far an attacker can go with stolen credentials.
GOOGLE ISSUES WARNING ON FAKE VPN APPS
7) Review app permissions and installed apps regularly
Malware often abuses permissions such as Accessibility or Device Admin because they allow deep control over your phone. Check your settings to see which apps have these permissions and remove anything that looks unfamiliar. Also, look through your installed apps and uninstall any tool or service you do not remember adding. Regular reviews help you spot threats early before they can steal data.
Kurt’s key takeaway
BankBot YNRK is one of the most capable Android banking threats discovered recently. It combines device profiling, strong persistence, UI automation and data theft to gain full control over a victim’s financial apps. Because much of its activity relies on Accessibility permissions, a single tap from the user can give attackers complete access. Staying safe means avoiding unofficial APKs, reviewing installed apps regularly and being cautious of any sudden request to enable special permissions.
Do you think Android phone makers like Samsung or Google are doing enough to protect you from malware? Let us know by writing to us at Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter
Copyright 2025 CyberGuy.com. All rights reserved.
Apple CEO Tim Cook delivered his final WWDC keynote as Apple CEO, announcing smarter features included in the tech company’s next big software update. (Josh Edelson / AFP via Getty Images)
NEWYou can now listen to Fox News articles!
Welcome to Fox News’ Artificial Intelligence newsletter with the latest AI technology advancements.
IN TODAY’S NEWSLETTER:
– 12 biggest Apple WWDC 2026 takeaways you need to know
– California city votes to permanently ban data centers in first-of-its-kind measure
– Meta launches $115M skilled trades academy with guaranteed jobs for graduates in 4 states
SIRI UPGRADE: Apple used WWDC 2026, its annual developers conference, to lay out what is coming next for your iPhone, Mac, iPad, Apple Watch and Vision Pro. This year’s keynote also carried extra weight because it marked Tim Cook’s final WWDC as Apple CEO before John Ternus takes over in September. Still, the biggest story for users was software. Apple put Siri AI and Apple Intelligence at the center of the keynote, while also announcing iOS 27 support for older iPhones, new child safety tools, faster performance and smarter features across everyday apps.
Attendees watch a presentation during Apple’s annual Worldwide Developers Conference in Cupertino, California, on June 8, 2026. (Carlos Barria/Reuters)
POWER GRID LOCK: Voters in a Southern California city overwhelmingly approved a ballot measure that permanently prohibits data centers within city limits, underscoring growing local resistance to the infrastructure powering the artificial intelligence boom. Monterey Park voters approved Measure NDC by a margin of 10,321 votes to 1,362 votes, or 88.34%, according to official election results from Los Angeles County.
WORKFORCE WIN: Tech giant Meta on Monday announced that it’s launching a new academy for workers to receive training in a skilled trade at no cost with a job guaranteed for all graduates.
RED THREAT: Sen. Tom Cotton urged the Justice Department to investigate a covert campaign linked to China designed to “kneecap” America’s rapidly expanding artificial intelligence infrastructure in a letter obtained exclusively by Fox News Digital.
Sen. Tom Cotton, R-Ark., arrives for a vote in the U.S. Capitol on April 30, 2025. (Bill Clark/CQ-Roll Call, Inc via Getty Images)
LABOR RECKONING: U.S. employers ramped up layoffs in May as the artificial intelligence (AI) rollout was the leading factor cited by companies cutting their workforces, new data shows.
WHO IS THIS? Your phone rings. It’s your son’s voice. Panicked. He says he’s been in a car accident. He hurt someone. He’s about to be arrested. He needs $15,000 wired before the end of the day, and please, don’t tell anyone yet. You’d wire the money. Of course you would. Except it isn’t your son. It’s a scammer who spent about 10 minutes online, pulled three seconds of audio from a Facebook video your son posted last Christmas, and fed it into an AI voice cloning tool that costs less than a Netflix subscription.
PRIVATE NO MORE? OpenAI said Monday it has taken a formal step toward a potential stock market debut, signaling that the artificial intelligence company is preparing for the possibility of becoming a publicly traded firm.
INTELLIGENCE QUESTIONS: Apple has spent years telling us that privacy starts on the device. For many users, that message feels reassuring. Your messages, photos, emails and app data sit in your hand, protected by Face ID, passcodes and Apple’s security layers. Now, new research gives Apple’s on-device AI a reality check.
Subscribe now to get the Fox News Artificial Intelligence Newsletter in your inbox.
FOLLOW FOX NEWS ON SOCIAL MEDIA
YouTube
X
SIGN UP FOR OUR OTHER NEWSLETTERS
Fox News First
Fox News Opinion
Fox News Lifestyle
Fox News Health
DOWNLOAD OUR APPS
Fox News
Fox Business
Fox Weather
Fox Sports
Tubi
WATCH FOX NEWS ONLINE
Fox News Go
STREAM FOX NATION
Fox Nation
Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.
Memory is now the most expensive component in a smartphone. It’s more expensive than the processor, more expensive than the display, and can account for more than 50% of the total hardware bill.
For Phone (4a), memory costs doubled between when we decided to build the device and when it launched. They’ve doubled again since.
I posted about this earlier this year. It’s now playing out, faster than predicted.
Phone prices are going up, and they’ll keep going up into next year. Since February, new phones have been launching up to $100 more expensive than their predecessors. In India, phones above ₹30K have seen price jumps of ₹7,000 or more.
The natural instinct is to buy ahead. It doesn’t work that way. In a shortage, memory is allocated, not bought. You get what you’re given, at the current price.
If you’ve been waiting to upgrade a device, the best time was yesterday. The next best time is now. This year’s sale season won’t have the discounts people are used to.
NEWYou can now listen to Fox News articles!
I know what you are thinking. Why on earth would Google want to release millions of mosquitoes? That was my first reaction too.
Usually, when we hear “Google” and “bugs” in the same sentence, we think about software. This time, the bugs are real.
Google’s Debug project is asking federal regulators for permission to release sterile male mosquitoes in New Jersey, California and Florida. The goal is to reduce mosquito populations that can spread disease.
Now the big question is whether this is a smart new way to fight mosquito-borne disease, or a tech-backed experiment that needs much more public scrutiny.
GOOGLE’S DARK SIDE: 5 SEARCH TERMS TO AVOID AT ALL COSTS
Google Debug project workers. (Courtesy: Google Debug Project)
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (This Saturday, June 13, 10 am ET)
- Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com.
How Google’s mosquito plan is supposed to work
Google’s Debug project says it is using science, automation and engineering to fight disease-carrying mosquitoes. The idea comes from a method called the sterile insect technique.
Here is the basic version. Scientists raise male mosquitoes that cannot produce viable offspring. Then they release those males into the wild. When the sterile males mate with wild females, the eggs do not hatch. Over time, the local mosquito population can shrink.
That part is important. Male mosquitoes do not bite. Female mosquitoes are the ones that bite and can spread disease. So Google isn’t trying to release more biting mosquitoes into neighborhoods. It is trying to release males that can help stop future generations from hatching.
Why Google wants to release mosquitoes
Google’s Debug project sees mosquito control as a public-health and technology challenge. The team says it wants to use engineering, automation and AI tools to reduce disease-carrying mosquito populations.
The idea is to stop “bad bugs” with “good bugs.” That may sound strange, but the science behind it has been studied for decades.
Sterile insect releases have been used against other pests, including fruit flies, screwworms and codling moths. Mosquitoes are harder. They are fragile, difficult to raise at a massive scale and challenging to sort by sex. That is where Debug says Google’s technology can help.
Why sorting male mosquitoes matters
Debug says the process starts by raising sterile male mosquitoes. One approach uses Wolbachia, a naturally occurring bacterium found in many insects.
The bacteria can make males incompatible with wild females that do not carry the same Wolbachia strain. When they mate, the eggs fail to develop.
After that, Debug has to separate males from females. This step matters a lot. If the project releases too many females by mistake, the whole idea becomes much harder to trust.
That is where Google’s tech background comes in. Debug says its team is using sensors, algorithms, automation and monitoring tools to raise, sort, release and track mosquitoes at scale. In other words, this is mosquito control with a Silicon Valley twist.
STOP GOOGLE FROM FOLLOWING YOUR EVERY MOVE
Debug Google facilities in Singapore. (Courtesy: Google Debug Project)
Why sterile male mosquitoes could help
Mosquito-borne diseases are a serious global health problem. Some mosquitoes can spread dengue, Zika, yellow fever, chikungunya, West Nile virus and other illnesses.
Traditional mosquito control often depends on pesticides. Those can help, but they can also raise environmental concerns. Mosquitoes can also become harder to control over time.
That is why sterile male releases interest some researchers. The approach targets a specific mosquito population. It also avoids spraying more chemicals into the environment.
If it works, the local mosquito population drops because fewer eggs hatch. That could mean fewer disease risks in areas where these mosquitoes are a problem.
Why residents are worried about Google mosquitoes
Even with the science behind it, the public concern is easy to understand. Nobody likes the phrase “release millions of mosquitoes.” It sounds like the start of a bad summer, not a public-health project.
Some residents also worry about control. Once living insects are released, people want to know what happens next. They want to know who monitors the program, who pays for follow-up work and what happens if the results are not what scientists expected. Those are fair questions.
There is also a trust issue. A project like this can feel very different when a private tech giant is involved. People may support disease prevention and still feel uneasy about a corporation playing such a large role in local ecosystems.
The biggest challenge with sterile mosquito releases
The success of this idea depends on precision. Male mosquitoes do not bite. Female mosquitoes do. So the sorting process has to be extremely accurate.
Debug says it is working on technology to separate males from females quickly. That may include sensors, algorithms and engineering systems that spot biological differences between them.
However, this is the part many people will focus on. If the public is told only males will be released, they will want proof. They will also want clear oversight from regulators. When you are dealing with living insects, “close enough” isn’t the most reassuring phrase.
NEW GOOGLE TOOL MAKES REMOVING PERSONAL INFORMATION EASIER
Images of freshly-enclosed male and female mosquitoes marching in a straight line before they get sex sorted. (Courtesy: Google Debug Project)
What the EPA is reviewing
The EPA is reviewing Google’s request for an experimental use permit. The filing involves Wolbachia pipientis contained in live adult male mosquitoes.
The purpose is to test whether Debug’s male mosquitoes can mate with wild females and suppress the population.
The EPA will decide whether to approve or deny the request. If it approves the permit, it can also set conditions for how the project must operate.
What Google mosquitoes could mean for you
Even if you do not live in one of the proposed release areas, this is worth watching. If Google’s project works, more communities may look at sterile mosquito releases as another tool against disease. That could be good news in areas dealing with mosquito-borne illnesses.
At the same time, it raises a larger question. How much public-health work should depend on private companies with their own funding, technology and long-term goals? For many people, the science may sound promising. The setup may still feel uncomfortable. Both reactions can be true.
Kurt’s key takeaways
Google releasing mosquitoes may sound strange, but the goal is real public health. Debug wants to use sterile male mosquitoes to cut down populations that can spread disease. There is a reason scientists are interested. Male mosquitoes do not bite, and sterile insect releases have been studied for decades. Still, communities deserve more than a promise that everything will go as planned. They need clear answers about monitoring, safeguards, costs and what happens if the project fails. Fighting mosquito-borne disease is important. But once living insects are released into the wild, trust and oversight have to come first.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Would you trust Google to help control mosquitoes in your community? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
-
Technology6 seconds agoFox News AI Newsletter: Top 12 takeaways from Apple’s new AI features
-
Business7 minutes agoSpaceX shares rise 19% in stock market debut after historic IPO
-
Entertainment10 minutes agoGene Shalit, beloved and bushy film critic on the ‘Today’ show, dies at 100
-
Lifestyle15 minutes agoAt Riverside’s Mission Inn, former owner departs with historic art — and locals are outraged
-
Politics22 minutes agoAfter uncertainty, a positive sign for L.A. Olympics transportation funding
-
Sports30 minutes agoPhotos: U.S. defeats Paraguay in its World Cup opener
-
World40 minutes agoOne killed as Israel hits south Lebanon, issues forced displacement orders
-
News1 hour agoTrump says U.S. military strike killed leader of Tren de Aragua gang
