{"id":38641,"date":"2026-03-20T11:45:45","date_gmt":"2026-03-20T11:45:45","guid":{"rendered":"https:\/\/cryptomag.finance\/?p=38641"},"modified":"2026-03-20T11:45:45","modified_gmt":"2026-03-20T11:45:45","slug":"bank-trojan-hits-android-users-targets-payment-system-used-by-150000000-people","status":"publish","type":"post","link":"https:\/\/cryptomag.finance\/?p=38641","title":{"rendered":"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"600\" src=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2024\/07\/wells-drains-banks.jpg?resize=1024,600\" class=\"webfeedsFeaturedVisual wp-post-image\" alt=\"\" \/><\/p>\n<p>A new Android banking trojan that uses a mix of human and artificial intelligence agents to steal from victims is now targeting a payments system relied on by tens of millions of people.<\/p>\n<p><a href=\"https:\/\/zimperium.com\/blog\/pixrevolution-the-agent-operated-android-trojan-hijacking-brazils-pix-payments-in-real-time\" rel=\"noopener\" target=\"_blank\">According<\/a> to cybersecurity firm Zimperium, the PixRevolution banking malware is targeting users of Brazil\u2019s PIX payment system by first surveilling them in real-time and then draining their funds when they initiate transactions.<\/p>\n<p>Per Zimperium, PixRevolution banking malware drains funds in a five-step process that includes monitoring for victims to initiate PIX payments.<\/p>\n<p>Upon detecting an imminent PIX transaction, the malware notifies its command and control server, which subsequently alerts an AI or human agent to start watching the victim\u2019s screen in real time. Once the process to transfer funds is underway, the agent sends a command that discreetly changes the intended recipient to the attacker\u2019s preferred account.<\/p>\n<p><em>\u201cWhat distinguishes this threat from conventional banking trojans is its fundamental design: a human or AI agent operator is actively engaged on the remote end, observing the victim\u2019s phone screen instantaneously, poised to act at the precise moment of transaction.\u201d<\/em><\/p>\n<p>Zimperium says that victims don\u2019t usually notice anything unusual as their banking app performs as normal and they receive all the confirmations necessary to conclude that a successful transaction took place. According to Zimperium, it is only later that victims realize that the money was sent to the wrong recipient.<\/p>\n<p><em>\u201cAnd because PIX transfers are instant and final, recovery is extraordinarily difficult.\u201d<\/em><\/p>\n<p>The PIX payment system processes over three billion transactions every month and boasts more than 150 million registered users.<\/p>\n<p>Some of the financial institutions that the PixRevolution banking malware is targeting include Santander Brasil, Banco do Brasil and Nubank. In 2021, the investing conglomerate associated with legendary investor Warren Buffett, Berkshire Hathaway, <a href=\"https:\/\/building.nubank.com\/investors-berkshire-hathaway\/\" rel=\"noopener\" target=\"_blank\">invested<\/a> $0.5 billion in Nubank.<\/p>\n<p><em><span>Follow us on <a href=\"https:\/\/x.com\/TheDailyHodl\" target=\"_blank\" rel=\"noopener\">X<\/a>, <a href=\"https:\/\/www.facebook.com\/thedailyhodl\/\" target=\"_blank\" rel=\"noopener\">Facebook<\/a> and <a href=\"https:\/\/t.me\/thedailyhodl\" target=\"_blank\" rel=\"noopener\">Telegram<\/a><\/span><\/em><br \/>\n<br \/>\n<em><span>Don&#8217;t Miss a Beat \u2013 <a href=\"https:\/\/dailyhodl.com\/join-the-daily-hodl-email-list\/\" target=\"_blank\" rel=\"noopener\">Subscribe<\/a> to get email alerts delivered directly to your inbox <\/span><\/em><br \/>\n<br \/>\n<em><span>Check <a href=\"https:\/\/dailyhodl.com\/crypto-markets\/\" target=\"_blank\" rel=\"noopener\">Price Action<\/a><\/span><\/em><br \/>\n<br \/>\n<em><span>Surf <a href=\"https:\/\/dailyhodl.com\/daily-hodl-mix\">The Daily Hodl Mix<\/a><\/span><\/em><br \/>\n<\/p>\n<div class=\"hideinamp\">\n<div class=\"dianomi_context\" data-dianomi-context-id=\"736\"><\/div>\n<p>&amp;nbsp<\/p>\n<h6>Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.<\/h6>\n<\/div>\n<p><span><em>Generated Image: DALLE3<\/em><\/span><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/dailyhodl.com\/2026\/03\/20\/bank-trojan-hits-android-users-targets-payment-system-used-by-150000000-people\/\">Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/dailyhodl.com\/\">The Daily Hodl<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>A new Android banking trojan that uses a mix of human and artificial intelligence agents to steal from victims is now targeting a payments system relied on by tens of millions of people. According to cybersecurity firm Zimperium, the PixRevolution banking malware is targeting users of Brazil\u2019s PIX payment system by first surveilling them in [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":38642,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[],"tags":[],"class_list":["post-38641","post","type-post","status-publish","format-standard","has-post-thumbnail"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People - Cryptomag<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptomag.finance\/?p=38641\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People - Cryptomag\" \/>\n<meta property=\"og:description\" content=\"A new Android banking trojan that uses a mix of human and artificial intelligence agents to steal from victims is now targeting a payments system relied on by tens of millions of people. According to cybersecurity firm Zimperium, the PixRevolution banking malware is targeting users of Brazil\u2019s PIX payment system by first surveilling them in [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptomag.finance\/?p=38641\" \/>\n<meta property=\"og:site_name\" content=\"Cryptomag\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-20T11:45:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2024\/07\/wells-drains-banks.jpg?resize=1024,600\" \/>\n<meta name=\"author\" content=\"Crypto Magazine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:site\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Crypto Magazine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641\"},\"author\":{\"name\":\"Crypto Magazine\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"headline\":\"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People\",\"datePublished\":\"2026-03-20T11:45:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641\"},\"wordCount\":449,\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/wells-drains-banks-cRMR1H.webp\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641\",\"name\":\"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People - Cryptomag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/wells-drains-banks-cRMR1H.webp\",\"datePublished\":\"2026-03-20T11:45:45+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptomag.finance\\\/?p=38641\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641#primaryimage\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/wells-drains-banks-cRMR1H.webp\",\"contentUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/wells-drains-banks-cRMR1H.webp\",\"width\":1024,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=38641#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptomag.finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/\",\"name\":\"Cryptomag\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptomag.finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\",\"name\":\"Crypto Magazine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"caption\":\"Crypto Magazine\"},\"sameAs\":[\"https:\\\/\\\/cryptomag.finance\",\"https:\\\/\\\/x.com\\\/cryptomagz\"],\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People - Cryptomag","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptomag.finance\/?p=38641","og_locale":"en_US","og_type":"article","og_title":"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People - Cryptomag","og_description":"A new Android banking trojan that uses a mix of human and artificial intelligence agents to steal from victims is now targeting a payments system relied on by tens of millions of people. According to cybersecurity firm Zimperium, the PixRevolution banking malware is targeting users of Brazil\u2019s PIX payment system by first surveilling them in [&hellip;]","og_url":"https:\/\/cryptomag.finance\/?p=38641","og_site_name":"Cryptomag","article_published_time":"2026-03-20T11:45:45+00:00","og_image":[{"url":"https:\/\/dailyhodl.com\/wp-content\/uploads\/2024\/07\/wells-drains-banks.jpg?resize=1024,600","type":"","width":"","height":""}],"author":"Crypto Magazine","twitter_card":"summary_large_image","twitter_creator":"@cryptomagz","twitter_site":"@cryptomagz","twitter_misc":{"Written by":"Crypto Magazine","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptomag.finance\/?p=38641#article","isPartOf":{"@id":"https:\/\/cryptomag.finance\/?p=38641"},"author":{"name":"Crypto Magazine","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"headline":"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People","datePublished":"2026-03-20T11:45:45+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=38641"},"wordCount":449,"image":{"@id":"https:\/\/cryptomag.finance\/?p=38641#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/wells-drains-banks-cRMR1H.webp","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cryptomag.finance\/?p=38641","url":"https:\/\/cryptomag.finance\/?p=38641","name":"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People - Cryptomag","isPartOf":{"@id":"https:\/\/cryptomag.finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=38641#primaryimage"},"image":{"@id":"https:\/\/cryptomag.finance\/?p=38641#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/wells-drains-banks-cRMR1H.webp","datePublished":"2026-03-20T11:45:45+00:00","author":{"@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"breadcrumb":{"@id":"https:\/\/cryptomag.finance\/?p=38641#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptomag.finance\/?p=38641"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptomag.finance\/?p=38641#primaryimage","url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/wells-drains-banks-cRMR1H.webp","contentUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/wells-drains-banks-cRMR1H.webp","width":1024,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/cryptomag.finance\/?p=38641#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptomag.finance\/"},{"@type":"ListItem","position":2,"name":"Bank Trojan Hits Android Users, Targets Payment System Used by 150,000,000 People"}]},{"@type":"WebSite","@id":"https:\/\/cryptomag.finance\/#website","url":"https:\/\/cryptomag.finance\/","name":"Cryptomag","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptomag.finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040","name":"Crypto Magazine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","caption":"Crypto Magazine"},"sameAs":["https:\/\/cryptomag.finance","https:\/\/x.com\/cryptomagz"],"url":"https:\/\/cryptomag.finance\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/38641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=38641"}],"version-history":[{"count":0,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/38641\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/media\/38642"}],"wp:attachment":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=38641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=38641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=38641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}