Gbhackers FvncBot Malware Targets Android Banking Users in Poland
Article Content
Browse articles 
A new malicious application named FvncBot has been identified, targeting mobile banking customers in Poland. Disguised as a legitimate security tool from mBank, it exploits Android's accessibility services to deploy a banking trojan that operates covertly in the background. The threat was first observed on November 25, 2025.
Ask AI about this cluster
Answers cite the sources they use
Updated 194d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track FvncBot in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API… 
Massive Network of AI Proxy Servers Used for Malicious Activities Uncovered Security researchers from Team Cymru have identified over 10,000 proxy servers in China facilitating malicious AI activities. These servers, termed 'transfer stations,' are primarily used to bypass geographic restrictions and conduct model distillation attacks against frontier AI models. The infrastructure allows…