Reported by 2 outlets
Octagon Android Bot Targets Crypto Wallets and Banking Apps With Hidden VNC and Accessibility Overlays
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.55 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
update from cyberpress.org
Octagon Android Bot Targets Crypto Wallets and Banking Apps With Hidden VNC and Accessibility Overlays
cyberpress.org · 56d ago · August 18th, 2026
A newly identified Android malware platform named Octagon is targeting cryptocurrency wallets, banking apps, and messaging services through hidden remote control and accessibility abuse. Threat intelligence team discovered the malware in June 2026. The tool is sold as a malware-as-a-service offering by a Russian-speaking threat actor using the name AndroidKitKat. The operator reportedly charges buyers $1,400 per month and provides a Windows-based control panel for managing infected Android devices. Octagon is designed for on-device fraud. Once installed, it can abuse Android accessibility permissions to read screen content, monitor applications, capture credentials, and place fake login pages over legitimate apps. The malware can target cryptocurrency wallets , exchanges, banking platforms, and messaging services where victims may receive authentication codes. Sales thread for Octagon, 1 June 2026 (Source: iverify) The operator began advertising Octagon on a Russian-language cybercrime forum on June 1, 2026. A version 1.2 update was announced later that month. Although forum activity and backend logs indicate a Russian-speaking developer, the sales material and management panel are written in English, suggesting the service is marketed to international buyers. Octagon Android Wallet Banking Threat Octagon uses a command-and-control panel that displays compromised phones as “Wards.” From this panel, an operator can view installed apps, inspect screen content, deploy phishing o
-
update from gbhackers.com
Octagon Android Bot Uses Hidden VNC and Accessibility Overlays to Steal Crypto Wallet Credentials
gbhackers.com · 56d ago · August 18th, 2026
First advertised on a Russian-language cybercrime forum on June 1, 2026, the toolkit combines abuse of accessibility, stealthy remote control, credential-stealing overlays, SMS interception, and device reconnaissance to enable direct account takeover and cryptocurrency […] The post Octagon Android Bot Uses Hidden VNC and Accessibility Overlays to Steal Crypto Wallet Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .