Hackers Use MiningDropper to Deliver Infostealers, RATs, and Banking Malware on Android

Cybersecuritynews •Tushar Subhra Dutta • April 20, 2026

A fast growing Android malware campaign is using a framework called MiningDropper to push far more dangerous threats onto phones disguised as normal apps. Researchers describe it as a multi stage delivery system that can lead to infostealers, remote access trojans, banking malware, or even cryptocurrency mining activity on infected devices. The campaign reaches victims […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MiningDropper Framework Delivers Multiple Malware Types on Android Devices Hackers are leveraging a modular Android framework known as MiningDropper to distribute various forms of malware, including infostealers, remote access trojans (RATs), and banking malware. This multi-stage dropper system can also facilitate cryptocurrency mining on compromised devices. The campaign targets Android users by disguising malicious payloads as legitimate applications. Researchers have noted a rapid increase in the scope of this malware campaign, affecting a wide range of Android devices. Specific malware types associated with MiningDropper include BTMOB RAT and credential-stealing spyware. The current status indicates ongoing exploitation with no immediate resolution in sight. Users are advised to remain vigilant against suspicious applications and potential malware infections. 2 sources 65

Extracted Entities

Hackers Use MiningDropper to Deliver Infostealers, RATs, and Banking Malware on Android

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)