OTX Threat: Fake Banking Rewards, Telegram Delivery and Albiriox: Anatomy of an Android Malware Campaign

A malicious campaign was detected impersonating an Italian banking brand through a fraudulent domain offering fake financial rewards for installing a mobile application. Users are redirected to a Telegram bot that distributes a malicious Android APK outside official app stores. The APK functions as a dropper containing an embedded second-stage payload identified as Albiriox, an Android banking Rem Sectors: Finance