Back to today’s briefing

Story perspectives

Android Malware Campaign Masquerades as TrustBastion Security App

2/1/2026

25 3 Full Breakdown

Summary

Story summary

Bitdefender researchers uncovered a large Android malware campaign using Hugging Face to distribute APKs.
Attackers spread a fake security app called TrustBastion to lure users into installing the malware.
The app masquerades as a security tool and prompts accessibility permission requests that grant extensive device control.
The malware steals login details for Alipay and WeChat and later reappears under a new name after removal.

1 of 1

Story summary

Bitdefender researchers uncovered a large Android malware campaign using Hugging Face to distribute APKs.
Attackers spread a fake security app called TrustBastion to lure users into installing the malware.
The app masquerades as a security tool and prompts accessibility permission requests that grant extensive device control.
The malware steals login details for Alipay and WeChat and later reappears under a new name after removal.