New Android Banking Malware Abuses Fake KYC Workflow and WhatsApp Delivery to Hijack Accounts

Cybersecuritynews •Tushar Subhra Dutta • April 28, 2026

A new Android banking malware, tracked as KYCShadow, was discovered targeting bank customers across India through a carefully designed fake Know Your Customer (KYC) verification workflow. Distributed via WhatsApp, it tricks victims into installing what appears to be an official banking compliance application, only to begin silently harvesting sensitive financial credentials in the background. The […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

KYCShadow Malware Targets Indian Bank Customers via WhatsApp A new Android banking malware known as KYCShadow has emerged, specifically targeting bank customers in India. The malware exploits a fake Know Your Customer (KYC) verification process and is distributed through WhatsApp messages. Victims receive messages urging them to install a malicious APK that masquerades as an official banking compliance application. Once installed, KYCShadow silently collects sensitive financial information from the users. This campaign is part of a broader trend of banking fraud in India, similar to previous incidents. The malware's distribution method and social engineering tactics make it particularly dangerous. As of now, there are no reported figures on the number of victims or financial losses. Security experts are urging users to be cautious of unsolicited messages regarding KYC updates. The situation is ongoing, with no specific countermeasures reported yet. 2 sources 65

Extracted Entities

New Android Banking Malware Abuses Fake KYC Workflow and WhatsApp Delivery to Hijack Accounts

The full story

Extracted Entities

Attack Types (1)

Countries (1)

Industries (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (2)