The Yanbian Gang is a cybercrime group targeting Android mobile banking customers in South Korea and Japan.
The Yanbian Gang is a cybercrime group that has targeted Android mobile banking customers in South Korea and Japan since at least 2013. They primarily distribute malicious Android apps masquerading as legitimate applications from major banks like Shinhan Savings Bank, Saemaul Geumgo, and KB Kookmin Bank. Defenders should enhance user awareness regarding banking apps downloaded from unofficial sources and monitor for phishing campaigns using mobile banking lures.
RiskIQ characterizes the Yanbian Gang as a group that targeted South Korean Android mobile banking customers since 2013 with malicious Android apps purporting to be from major banks, namely Shinhan Savings Bank, Saemaul Geumgo, Shinhan Finance, KB Kookmin Bank, and NH Savings Bank.
The Yanbian Gang distributed malicious Android apps targeting mobile banking customers on Android devices.
The Yanbian Gang distributed fake apps masquerading as major banks such as Shinhan Savings Bank, Saemaul Geumgo, Shinhan Finance, KB Kookmin Bank, and NH Savings Bank.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.