Attackers Use Vishing Attacks to Distribute New Android Malware
KnowBe4, Wednesday, August 26th, 2026
KnowBe4 covers Group-IB research on WindRelay Android malware delivered through impersonated bank phone calls.
Attackers are distributing a new Android malware called WindRelay through phone-based social engineering, according to researchers at Group-IB.
The attackers call victims while impersonating bank employees and instruct them to install a malicious application, using the authority of the supposed bank to overcome the victim's hesitation.
In one instance observed by Group-IB, the scammers completed the entire attack in just thirteen minutes, from first contact to executing a loan scam. The speed leaves almost no window for the victim to seek a second opinion or for a bank to intervene.