#ParsedReport #CompletenessHigh
24-09-2026

RemControl: AI Built the Overlays. Victims Lose their PINs

https://www.group-ib.com/blog/remcontrol-android-banking-trojan/

Report completeness: High

Threats:
Remcontrol
Dead_drop_technique
Medusa_ransomware
Medusa_trojan

Victims:
Retail banking customers, Financial institutions

Industry:
Retail, Financial

Geo:
France, Italian, Middle east, Canadian, Russian, Spain, Poland, Canada, Italy, Portugal

ChatGPT TTPs:
do not use without manual check
T1027, T1027.013, T1036, T1041, T1056.001, T1056.002, T1071.001, T1082, T1090, T1102.001, have more...

IOCs:
Url: 11
Domain: 4
File: 2
IP: 1
Hash: 18

Soft:
Android, Google Play, Telegram, Cloudflare, FastAPI, Photoshop

Algorithms:
sha256, aes-128-cbc, xor, base64, aes

Functions:
connect, JavaScript

Languages:
javascript