Gbhackers

FvncBot Malware Targets Android Banking Users in Poland

First seen 7 Feb 2026, 01:18 UTC • •53.1

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

A new malicious application named FvncBot has been identified, targeting mobile banking customers in Poland. Disguised as a legitimate security tool from mBank, it exploits Android's accessibility services to deploy a banking trojan that operates covertly in the background. The threat was first observed on November 25, 2025.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 241d ago How this analysis works

Threat Graph

4 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Malware
Trojan

Malware (1)

FvncBot

Affected Platform (1)

Android

Relationships

Malware targets Android
Trojan targets Android

Following this threat?

Track FvncBot in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

FvncBot Malware Targets Android Banking Users in Poland

Article Content

More articles in this cluster (2)

Threat Graph

Following this threat?

Extracted Entities (6)

Attack Types (2)

Countries (1)

Industries (1)

Malware (1)

Platforms (1)