Critical THREAT

Android Banking Trojan APK [394E9C]

Technical Analysis & Behavior

Malicious APK identified as Android Banking Trojan / Dropper. Originally distributed as NordVPN_Бесплатный.vpn (2).apk. Tracked by Abuse.ch MalwareBazaar.

Package ID / SHA256 Hash

sha256:394e9cc44f80f3d...

Threat Family

Android Banking Trojan / Dropper

Target Platform

Android

Date Logged

2026-09-06

Device Compromised? Scan & Protect Your Identity

If you installed or interacted with this APK, your credentials, 2FA codes, and banking apps may be exposed. Activate real-time mobile antivirus protection immediately.

🛡️ Activate Surfshark Antivirus & Alternative ID 🔒 Cloud APK Sandbox — Coming Soon