Android Users Hit by FvncBot Malware Capturing Keystrokes and Dropping Payloads

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FvncBot Malware Targets Android Users, Stealing Financial Data FvncBot is a new Android banking malware first observed on November 25, 2025. It is designed to capture keystrokes, record screens, and inject fake login pages into banking applications, primarily affecting users of mBank in Poland. The malware spreads through a fake application disguised as a security tool. 3 sources 60