New Android banking Trojan #Herodotus mimics human typing by adding random delays (0.3–3s) to evade behavioral detection
Distributed via smishing + droppers.
It abuses Accessibility Services, steals credentials & OTPs, and shows fake overlays
Here is how installation looks like
Be careful out there 🙏
adamsmith
npub1r4…yx8r5
2025-10-28 16:28:10 UTC
Author Public Key
npub1r4f9wfwtq8mrdm4deuh27hzmnsq364usvsvet0ks0yk995yyvrwqxyx8r5Published at
2025-10-28 16:28:10 UTCEvent JSON
{
"id": "888961b41d14b12461104db6ed1c92af84907b56cae7edda452c1f73dd0bc9a5",
"pubkey": "1d525725cb01f636eeadcf2eaf5c5b9c011d5790641995bed0792c52d08460dc",
"created_at": 1761668890,
"kind": 1,
"tags": [
[
"t",
"Herodotus"
],
[
"t",
"herodotus"
],
[
"r",
"https://video.nostr.build/8fcc7d920ebdde839dfe764306ea48e6a7e5be28b2a40758af7826423584a53d.mp4"
],
[
"imeta",
"url https://video.nostr.build/8fcc7d920ebdde839dfe764306ea48e6a7e5be28b2a40758af7826423584a53d.mp4",
"x d6c19944942940293317823b528a1a87fb59c9a2cfb8ac3fc1b919b61202da3b",
"size 6910116",
"m video/mp4",
"dim 720x1280",
"blurhash ]8BMiN}?^zxv?HPANeIpofNG009cD,NGIU=|-nxZtRt7?IxZ%L-o-pR:ozkWt8WCRi-;xuX8E19FR.xuRjniIUIVogaext",
"ox d6c19944942940293317823b528a1a87fb59c9a2cfb8ac3fc1b919b61202da3b",
"alt "
]
],
"content": "New Android banking Trojan #Herodotus mimics human typing by adding random delays (0.3–3s) to evade behavioral detection\nDistributed via smishing + droppers.\nIt abuses Accessibility Services, steals credentials \u0026 OTPs, and shows fake overlays\nHere is how installation looks like\nBe careful out there 🙏 https://video.nostr.build/8fcc7d920ebdde839dfe764306ea48e6a7e5be28b2a40758af7826423584a53d.mp4",
"sig": "c005eeab935e1f9212aab1fc572463301464499d39542d9d72126d469da610cfba9ae234084da36cc69dfa8a87c05927cf7f8d6ee71ddad3084c8f2bdea31020"
}