Name: Crocodilus Mobile Malware: Evolving Fast, Going Global
Start: 2025-06-12T13:00:00Z
End: 2025-06-12T13:00:15.000Z
Location: BrightTALK

Welcome to ThreatFabric's dedicated BrightTalk channel, your beacon for unraveling the complexities of mobile malware and fraud in our digital world. Through our meticulously crafted webinars, discover findings from our latest research, hear firsthand accounts from our team of experts, and gain actionable strategies to counter emerging threats. Whether you're a financial security expert, IT professional, or someone keen on fortifying your digital assets, our content bridges the gap between research and real-world application. Connect with us to stay a step ahead in understanding and mitigating fraud and mobile malware risks.

2025 marked one of the most disruptive years in the fraud landscape. From the resurgence of carding and NFC-relay attacks to AI-driven impersonation scams and large-scale criminal data harvesting, fraudsters have evolved faster than ever.

In this webinar, ThreatFabric’s experts break down the most critical fraud developments of 2025 and explain what financial institutions must prioritise in 2026. We’ll explore how attackers modernised their techniques, the growing use of generative AI, the rise of synthetic identities, and the increasing convergence of fraud, AML and cyber domains.

You’ll walk away with a clear understanding of the threats shaping 2026, and the proactive intelligence, device-level insights and behavioural detections needed to stay ahead.

Key topics:

The biggest fraud shifts in 2025 and what drove them

AI-enabled scams, deepfakes and automated attack kits

The return of carding, NFC relay and wallet-based fraud

Criminal data harvesting and the impact on identity fraud

How fraud & AML teams are converging — and why FRAML matters

Strategic recommendations for 2026 fraud prevention

Fraud Trends in Review: What 2025 Taught us for 2026

In this joint webinar by Inform and ThreatFabric, we will explore the lifecycle of a real-life fraud scenario by tracing the actor's actions, the victim’s journey and the fraud detection process. We will outline the scam's modus operandi and how early warning signals are identified on a mobile device, combined with threat intelligence, and mapped to the Fraud Kill Chain. These signals are then ingested into a bigger detection model, which combines contextual data and indicators of fraud to detect fraud with great confidence. The session demonstrates how full synergy between all aspects of fraud detection will help you maintain the trust of your banking customers.

Following Fraud from Mobile to Model

In just 15 minutes, this Lightning Webinar will explore one of Sweden’s most urgent fraud challenges: Safe Account Scams. Tailored for fraud and cyber fusion professionals, the session offers practical, high-impact insights for identifying, dissecting, and mitigating these scams.

What we’ll cover:

-An overview of Safe Account Scams and their mechanics
-Applying the Fraud Kill Chain to break down the scam
-Developing a practical mitigation matrix
-Contextualising the threat in the Swedish landscape
-Common mistakes and proactive steps for fraud teams

Whether you're in fraud prevention or cyber threat intelligence, this session delivers actionable takeaways to strengthen your defences.

Duration: 15 minutes
Target Audience: Fraud and CTI professionals in financial services
Language: English
Region Focus: Sweden

Lightning Webinar: Breaking Down Safe Account Scams in Sweden

In just 15 minutes, this Lightning Webinar will explore one of the UK’s most pressing fraud threats: Safe Account Scams. Tailored for fraud prevention and cyber fusion professionals, this concise session provides practical, high-impact insights for identifying, analysing, and mitigating these scams.

What we’ll cover:

An overview of Safe Account Scams and how they operate
Applying the Fraud Kill Chain to break down the scam step by step
Building an actionable mitigation matrix
Understanding the threat within the UK banking landscape
Common pitfalls and proactive measures for UK-based fraud teams

Whether you're working in fraud prevention or cyber threat intelligence, this session delivers clear, actionable takeaways to strengthen your defences.

Duration: 15 minutes
Target Audience: Fraud and CTI professionals in UK financial services
Region Focus: United Kingdom

Lightning Webinar: Breaking Down Safe Account Scams in the United Kingdom

ThreatFabric experts have uncovered a new and highly sophisticated strain of mobile malware, currently targeting financial institutions and crypto wallet users in Turkey and Spain.

This session will dive into the technical details of the malware’s capabilities—including overlay attacks, keylogging, remote access, and advanced abuse of Android Accessibility Services. We’ll also explore how the malware uses social engineering tactics to steal crypto wallet credentials and what the presence of Turkish-language debug messages suggests about its origin.

Join us to:

Understand how this new Trojan compares to other malware families

See how it bypasses defences and executes fraud

Learn practical strategies to detect and respond to emerging mobile threats

Don’t miss this timely update on a rapidly evolving threat in the mobile fraud landscape.

Time: 1pm UTC+3

Crocodilus Exposed: Inside the Latest Mobile Malware Targeting Turkey

El panorama del fraude en LATAM y España está en constante evolución. Aunque los troyanos móviles siguen siendo una amenaza clave, el spyware está emergiendo como una alternativa aún más sigilosa y peligrosa. En este webinar, exploraremos cómo esta tendencia impacta a las instituciones financieras y qué estrategias pueden adoptarse para mitigar estos riesgos.

Spyware como alternativa a los troyanos móviles en LATAM y España

In this lightning webinar, our experts will analyze Antidot, a highly sophisticated Android banking malware that emerged in late 2024 and has rapidly expanded across North America. With a powerful set of capabilities, Antidot enables cybercriminals to execute overlay attacks, intercept credentials, and gain full remote control over infected devices, making it a serious threat to individuals and financial institutions in the region.

This session will explore its distribution methods and key technical features, providing valuable insights into how this malware operates. Whether you are a cybersecurity professional, threat researcher, or fraud prevention specialist, this webinar will offer critical intelligence on one of the most advanced mobile malware threats today.

Unpacking Antidot – The Latest Android Banking Threat

The mobile threat landscape in 2024 has been marked by several significant events that have reshaped the cybersecurity space. The leak of source codes has fuelled the development of new malware variants, amplifying risks for mobile banking users. Additionally, entirely new malware families have emerged, increasing the diversity of threats and expanding the pool of active threat actors in the field.

The rise of NFC-based malware has presented new challenges for financial organisations, particularly in the realm of contactless payments. Meanwhile, updates to the iOS 18 ecosystem have inadvertently opened doors for cybercriminals to exploit.

Join ThreatFabric’s Mobile Threat Intelligence Experts in this 1-hour webinar, designed to provide key insights into these trends and enhance understanding of the current state and future of the mobile threat landscape.

In this webinar, we will cover the major events of 2024, such as the leak of Octo's source code and the introduction of a new type of mobile banking malware. We will also explore the consequences of these events and their implications for the future of mobile threats.

2024 Mobile Threat Landscape – Key Events, Trends, and Predictions

Join us for an insightful webinar as we explore the latest trends in the fraud landscape across the DACH region. Our experts will provide actionable insights to help you stay ahead of emerging threats and protect your organisation.


Key Topics:

Digital Banking and Financial Literacy: Understand the current state of digital banking adoption and the importance of consumer education.

Fraud Reimbursement and Regulation: Explore new regulations around Authorised Push Payment (APP) fraud and their implications.

Bank Impersonation Scams: Discover innovative methods to detect and disrupt these scams, with a focus on collaboration across industries.

Mobile Malware: Learn about the growing mobile malware threats in the DACH region and effective detection strategies.

Cyber-Fraud Fusion: Embrace the concept of cyber-fraud fusion to enhance your fraud detection capabilities.

Don’t miss this chance to gain valuable insights and strengthen your fraud prevention measures.

Deception in the DACH, 5 Key Trends in the Fraud and Digital Payments Landscape

Join us for a deep dive into the fraud trends shaping 2024. This webinar will equip you with essential knowledge of the dynamics of financial deception, focusing on the methods that concern industry professionals, strategies employed by fraudsters to misappropriate funds, the industry's countermeasures, legislative actions, and the impact of global trends.

Key Takeaways:

The Evolution of Deception: Unveil the complex strategies behind contemporary scams, highlighting the critical role of social engineering in perpetuating fraud.

Mobile Malware Menace: Understand the tactics cybercriminals use to penetrate mobile devices, creating sophisticated banking malware designed to divert funds.

Victim’s Viewpoint: Obtain insights into the repercussions of fraud from the victims' perspective, and observe the shifting patterns in web and mobile banking practices.

The Fraud Pincer Movement: Investigate the compounded threat posed by cyber-attacks coupled with fraud, underscoring the necessity for an integrated defense approach.

Cyber-Fraud Fusion: Learn how progressive banks are integrating cyber and fraud defenses to fortify their safeguarding measures.

The Elephant in the Room: Discuss the importance of devising a post-check fraud strategy, noting why nascent financial entities encounter fewer complications.

Global Ripple Effects: Prepare for the ways international fraud trends may influence the strategic approaches of US anti-fraud teams.

Regulatory Response: Review the existing and imminent regulations aimed at curtailing online fraud.

This webinar promises to provide a comprehensive overview of the current state of fraud, offering actionable insights for navigating the complexities of financial security.

Scam Savvy 2024: 8 Key Trends about Cyber Swindles

In today's mobile-first world, the shift to online, always-on, 24x7 banking continues unabated. But as customers increasingly use the online and mobile channels to interact with the bank, fraudsters follow closely behind. As banking moves to mobile, so does fraud!

As we're seeing early signs of mobile malware families shifting to North America, now is a good time for a mobile threat landscape update focusing on the region.

Join ThreatFabric as we shine a light on recent developments in Mobile Malware in North America, lifting the lid on malware families, their capabilities, the actors behind them, and the growing ecosystem of underground products and services that support them.

Learn how victim devices get infected, and what the actors seek to do once they've infected a device. Use this knowledge to stay one step ahead of the threat.

Hello North America! Mobile Banking Means Mobile Threats

Last year saw many changes in the mobile threat landscape: Google limited the access that malicious application can have on an infected device; at the same time new actors entered the mobile space (drawn in by potential gains from fraud) bringing with them new tactics such as the biometric bypass. 

Join ThreatFabric's Mobile Threat Intelligence Experts in this 45-minute webinar aimed at providing a comprehensive overview of the trends and most relevant changes in the mobile threat landscape in 2023, with an eye towards what may be in store in 2024. 

The aim is to provide you with actionable insights that allow you to make informed decisions and adopt a pro-active approach to mitigating mobile security risks. 

Topics covered will include trends in distribution techniques aimed at defeating security measures introduced with Android 13, new attack techniques, the use of spyware in financial fraud, monetisation schemes, as well as our predictions and insights into future developments around the introduction of instant payment systems and third-party app stores.

2023 Mobile Threat Landscape Overview

Get ready to beat the rush in mobile fraud in the Gulf Region!

Threats to the mobile landscape are growing globally, and the Gulf Cooperation Council (GCC) region is no exception. Far from it, as the region accelerates its digital transformation, it is increasingly attracting the attention of global threat actors. Now is the time to prepare!

Join ThreatFabric, the mobile threat experts, in this 30-minute webinar designed to provide actionable insights into the most pressing mobile security threats in the region.

The aim is to provide you with actionable insights that allow you to make informed decisions and adopt a pro-active approach to mitigating mobile security risks.

Topics covered will include: the current threat landscape for mobile in the GCC region, emerging trends, and the state of mobile cyber risks in the Gulf.

Gulf Region Mobile Threat Landscape Update

Crocodilus first emerged in early 2025 as a highly capable Android banking Trojan. Initially confined to test and targeted campaigns, this malware strain has rapidly evolved, both in technical sophistication and global reach.

In this webinar, we’ll break down:

A quick recap of Crocodilus as a banking threat: core capabilities and early campaigns
New features recently observed, including automation and social engineering tools
Expansion beyond Turkey: global campaigns now targeting Europe, South America, and beyond

Join us for a concise, high-impact session designed to give fraud prevention and cybersecurity professionals the timely intelligence needed to stay ahead of this fast-moving threat.

Crocodilus Mobile Malware: Evolving Fast, Going Global

Mobile Malware

Mobile Attack

Fraud Prevention

Fraud

Trojan

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Crocodilus Mobile Malware: Evolving Fast, Going Global

Presented by

About this talk

ThreatFabric