New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new variant of GhostBat Android malware targets 60 Indian banking and UPI apps including Google Pay and PhonePe by using an accessibility overlay to capture PIN inputs without altering the visible interface. It combines touch interception and accessibility event interpretation to steal PINs and transmits the data to a backend infrastructure linked to the broader GhostX ecosystem.

This Wire brief sits within Fusion42's coverage of Cybersecurity.