NewsBytes
    Hindi Tamil Telugu
    More
    In the news
    Narendra Modi
    Amit Shah
    Box Office Collection
    Bharatiya Janata Party (BJP)
    OTT releases
    Hindi Tamil Telugu
    NewsBytes
    User Placeholder

    Hi,

    Logout

    India
    Business
    World
    Politics
    Sports
    Technology
    Entertainment
    Auto
    Lifestyle
    Inspirational
    Career
    Bengaluru
    Delhi
    Mumbai

    Download Android App

    Follow us on
    • Facebook
    • Twitter
    • Linkedin
    Home / News / Technology News / How FatBoyPanel malware is draining bank accounts in India
    Summarize
    Next Article
    How FatBoyPanel malware is draining bank accounts in India
    FatBoyPanel malware threatens over 25M devices in India

    How FatBoyPanel malware is draining bank accounts in India

    By Akash Pandey
    Apr 27, 2025
    01:52 pm

    What's the story

    A malware, dubbed FatBoyPanel, is posing a major threat to over 25 million devices in India.

    The cybercriminals behind this malicious software are employing social engineering tactics to fool unsuspecting users into downloading it.

    Once installed on a device, the malware can steal sensitive data and one-time passwords (OTPs), resulting in unauthorized transactions and potential financial loss.

    Malware details

    Detected in 900 apps

    FatBoyPanel is a mobile-first banking trojan that has been detected on nearly 900 different apps, mostly targeting Indians.

    The malware works by impersonating a trusted entity or official and then sending a malicious Android Package Kit (APK) for installation.

    Once installed, it accesses sensitive data and OTPs for carrying out unauthorized transactions, making it dangerous in the hands of attackers.

    Advanced features

    FatBoyPanel's centralized command structure

    The malware employs a centralized command structure to control multiple variants across campaigns.

    It abuses live phone numbers for OTP redirection and has exfiltrated data from over 25 million devices. This makes it more organized and dangerous than traditional banking trojans.

    The malware also asks for permission to read SMS messages, allowing it to capture OTPs and bypass two-factor authentication in real-time.

    Stealth tactics

    Malware hides its icon after installation

    FatBoyPanel uses a number of stealth tactics to maintain access and remain hidden. It hides its icon after installation and disables Google Play Protect.

    Once the required permissions are granted, it embeds itself into the system and communicates with its control panel.

    The attackers behind this malware often pose as government agencies or trusted services, sending fake APKs via WhatsApp to drive up installation rates among unsuspecting users.

    Protection strategies

    Preventive measures against FatBoyPanel malware

    To protect yourself from such threats, avoid sideloading APKs and only use official app stores.

    Keep Google Play Protect enabled to scan harmful apps. Opt for real-time threat detection by using mobile security software.

    Verify app sources before installation and never trust unknown or unofficial links.

    Check app permissions carefully to avoid granting SMS, call, or gallery access to unverified apps.

    Facebook
    Whatsapp
    Twitter
    Linkedin
    Related News
    Latest
    Malware
    WhatsApp
    Cybersecurity

    Latest

    'No firing or aggressive action': India after talks with Pakistan   Indian Army
    'Every terrorist now knows price of removing sindoor': PM Modi Narendra Modi
    Amazon-backed supermarket chain More Retail eyeing ₹2,000cr IPO in 2026 Initial Public Offering (IPO)
    Carlo Ancelotti appointed as Brazil head coach: Details here Carlo Ancelotti

    Malware

    'Toll Fraud' malware detected: How are Android users getting affected Android
    Android users beware! Delete these 8 malicious apps immediately Android
    Beware! These malicious apps can harm your Android smartphone Android
    Beware, Android smartphone users! GB WhatsApp may contain malware WhatsApp

    WhatsApp

    How to use less data for calls on WhatsApp  Technology
    You can now add sticker photos to your WhatsApp status Technology
    Choose who sees you: Guide to WhatsApp profile photo settings  Technology
    You can now generate group icons on WhatsApp: Here's how Android

    Cybersecurity

    Flawed delivery system of McDonald's India exposed customer data: Report McDonald's
    What to do if your Instagram account gets hacked Instagram
    How to secure your YouTube channel from cyber threats YouTube
    Thomas Cook hit by cyberattack in India, website down Cybercrimes
    Indian Premier League (IPL) Celebrity Hollywood Bollywood UEFA Champions League Tennis Football Smartphones Cryptocurrency Upcoming Movies Premier League Cricket News Latest automobiles Latest Cars Upcoming Cars Latest Bikes Upcoming Tablets
    About Us Privacy Policy Terms & Conditions Contact Us Ethical Conduct Grievance Redressal News News Archive Topics Archive Download DevBytes Find Cricket Statistics
    Follow us on
    Facebook Twitter Linkedin
    All rights reserved © NewsBytes 2025