Chinese-speaking threat actors targeting Mexican Android users with remote access Trojan

Chinese-speaking threat actors are leveraging sophisticated phishing campaigns and malvertising to distribute a powerful Android remote access trojan targeting Mexican users, enabling large-scale surveillance and credential theft—especially from banking apps—via a centralized, as-a-service infrastructure.