Yanbian Gang
MISP
Type:
Unknown
Unknown
Country:
Unknown
Unknown
First seen:
Unknown
Unknown
Details:
RiskIQ characterizes the Yanbian Gang as a group that targeted South Korean Android mobile banking customers since 2013 with malicious Android apps purporting to be from major banks, namely Shinhan Savings Bank, Saemaul Geumgo, Shinhan Finance, KB Kookmin Bank, and NH Savings Bank.
References (5)
- riskiq.com - Yanbian Gang Malware Distribution
- trendmicro.com - A Look Into The Connection Between Xloader And Fakespy And Their Possible Ties With The Yanbian Gang
- trendmicro.com - Xloader Android Spyware And Banking Trojan Distributed Via Dns Spoofing
- trendmicro.com - Fakespy Android Information Stealing Malware Targets Japanese And Korean Speaking Users
- blog.trendmicro.com - Mobile Malware Gang Steals Millions From South Korean Users
Metadata
| ID: | 307 |
| Created: | 13/01/2026 17:48 |
| Updated: | 12/09/2026 04:00 |