This week in cybersecurity: new malware, significant crypto ATM fraud losses, and innovative user protection tools from Meta.
In the latest roundup of cybersecurity news, several significant developments have emerged, highlighting new threats and protective measures.
- New Android malware discovered, dubbed BeatBanker, features Chinese voiceover.
- CertiK reports significant losses due to fraudulent crypto ATM activities.
- Researchers demonstrate that tire pressure sensors can be exploited for vehicle tracking.
- Meta unveils new tools aimed at enhancing user security.
New Android Malware BeatBanker Identified
Kaspersky Lab has reported the emergence of BeatBanker, a sophisticated Android malware that functions both as a banking trojan and a hidden Monero miner. This malware is designed to steal sensitive user credentials while manipulating cryptocurrency transactions.
Disguised as financial applications and Starlink software on counterfeit Google Play sites, BeatBanker employs native libraries to load its malicious code directly into memory, thereby evading detection. In some instances, it replaces the banking module with a remote access trojan known as BTMOB RAT, granting attackers comprehensive control over infected devices.
Before activation, the malware checks for analysis tools and prompts a fake update window to gain permissions for further malicious actions. Interestingly, it continuously plays a low-volume Chinese audio track to remain undetected.
Additionally, BeatBanker can mine Monero using a modified version of XMRig software, activating based on specific conditions monitored by its operators.
Crypto ATM Fraud Losses Escalate
According to analysts from CertiK, losses from crypto ATM fraud in the U.S. soared to $333 million in 2025, with reported incidents increasing by 33% year-over-year. The U.S. represents a staggering 78% of the global crypto ATM market, which includes 45,000 terminals.
Experts warn that crypto ATM fraud is rapidly becoming one of the most prevalent financial crimes, with AI-driven social engineering tactics proving 4.5 times more lucrative than traditional fraud methods. The profile of fraudsters is shifting, with many now operating as organized, transnational criminal syndicates.
Tire Pressure Sensors: A New Surveillance Tool
A collaborative study from researchers in Spain, Switzerland, and Luxembourg has revealed that tire pressure monitoring systems (TPMS) can be exploited to track vehicle movements. The unencrypted transmission of data and unique identifiers from TPMS allows for the continuous broadcasting of signals that can uniquely identify vehicles.
In an experiment involving five budget receivers, researchers intercepted over 6 million messages from approximately 20,000 vehicles over ten weeks, successfully correlating signals to specific vehicles. This vulnerability raises concerns about targeted surveillance capabilities.
Meta Launches Enhanced User Protection Features
In response to rising security threats, Meta has introduced new protective measures for its users. These include:
- Warnings on Facebook for users interacting with suspicious accounts.
- Alerts on WhatsApp to prevent scammers from linking accounts.
- Improved threat detection in Messenger, leveraging AI to analyze messages for potential hacking indicators.
Meta also reported its efforts to block over 150,000 accounts connected to scam operations in Southeast Asia, alongside previous actions that removed over 159 million fraudulent ads and blocked numerous accounts linked to scams.
