Newly Sold Albiriox Android Malware Targets Banks and Crypto Holders

Cleafy analysis reveals Albiriox, a new Android Malware-as-a-Service (MaaS) RAT that targets over 400 global banking and crypto apps. Learn how ODF fraud enables full device takeover.

A dangerous new mobile threat called Albiriox has emerged, giving criminals a tool to completely take over victims’ Android phones and steal money directly from their banking or cryptocurrency apps. Online financial fraud threats detection platform Cleafy’s Threat Intelligence team identified and analysed this emerging threat.

The Rise of a ‘Rental’ Scam

According to Cleafy’s blog post, Albiriox is offered as a Malware-as-a-Service (MaaS) on underground forums, meaning other criminals can rent it to launch their own attacks. Researchers found evidence pointing toward Russian-speaking individuals being behind the operation.

Cleafy first identified the threat in September 2025 during private testing; it became publicly available a month later in October 2025. The project was first discussed in a specific Telegram channel, and ...