Novinarya

Security researchers have detailed Novinarya, an Iranian Android banking and cryptocurrency stealer. The malware uses a multi-layer native RC4 packer to hide itself and a dead drop resolver to retrieve command-and-control addresses, making it harder to detect and take down. The analysis describes it as a sophisticated threat targeting banking credentials and crypto wallet data on mobile devices, drawing attention from the cybersecurity community.