A Closer Look: Perkele Android Malware Kit
Summary: Perkele is an Android crimeware kit sold for $1,000 that disguises itself as a security certificate and intercepts the SMS one-time codes banks send to customers. In one operation Versafe traced, the malware was presented as a "zertificate" to customers of a German bank, and a separate control panel seen by Krebs stole one-time codes from customers of German institutions including Postbank and Comdirect, victimizing dozens of customers before it was taken down by German authorities or moved.
What you should know: The kit works by pairing PC malware with a phone: the PC Trojan prompts the victim to scan a QR code, the phone then relays the bank's SMS code to the attacker's server, and the fraudulent transaction completes - so the second factor is defeated by the customer's own device.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026