TrickMo (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 16:27:51 UTC
apk.trickmo (Back to overview)
TrickMo
TrickMo is an advanced banking trojan for Android. Starting out as a companion malware to TrickBot in 2020, it
first became a standalone banking trojan by addition of overlay attacks in 2021 and was later (2024) upgraded
with remote control capabilities for on-device fraud. The continued development and progressively improved
obfuscation suggests an active Threat Actor.
References
2025-02-09 ⋅ Medium (@mvaks) ⋅ mvaks
Analysis of malicious mobile applications impersonating popular Polish apps — OLX, Allegro, IKO
SpyNote TrickMo
2024-10-11 ⋅ zimperium ⋅ Aazim Yaswant
Expanding the Investigation: Deep Dive into Latest TrickMo Samples
TrickMo
2024-09-10 ⋅ Cleafy ⋅ Alessandro Strino, Michele Roviello
A new TrickMo saga: from Banking Trojan to Victim's Data Leak
TrickMo
2023-12-04 ⋅ cyble ⋅ Cyble
TrickMo's Return: Banking Trojan Resurgence With New Features
TrickMo
2020-03-24 ⋅ Pavel Asinovsky
TrickBot Pushing a 2FA Bypass App to Bank Customers in Germany
TrickMo
There is no Yara-Signature yet.
Source: https://malpedia.caad.fkie.fraunhofer.de/details/apk.trickmo
https://malpedia.caad.fkie.fraunhofer.de/details/apk.trickmo
Page 1 of 1