Security researchers have identified a dangerous new Android malware campaign called “Massiv,” which is being distributed through fake IPTV streaming apps. According to cybersecurity firm ThreatFabric, the malware is part of a large-scale operation that disguises itself as a harmless streaming application but is designed to steal sensitive data once installed.
After installation, the malicious app can monitor screen activity and capture inputs such as passwords, PIN codes, and banking details. It uses screen overlays and keylogging techniques to intercept data—even bypassing certain protections built into banking apps that are meant to prevent screen capture and unauthorized access. In some cases, attackers have reportedly used compromised devices to steal identities and open financial accounts in victims’ names, potentially for money-laundering purposes.
Researchers say the malware also enables remote control of infected devices, allowing attackers to manipulate the phone and gather additional data. To keep the app running long enough to deploy its payload, attackers often use cloned versions of legitimate IPTV websites as distractions while malware components download in the background.
Over the past eight months, fake IPTV apps have increasingly been used as bait in malware campaigns. While legitimate IPTV services do exist in official app stores, many malicious versions circulate on third-party websites. In the Massiv campaign, the apps themselves do not provide any real streaming functionality and serve only as delivery mechanisms for the malware. Most confirmed cases so far have been reported in Europe, particularly in Portugal, though the campaign could expand to other regions.
Security experts recommend installing apps only from trusted sources like the Google Play Store, keeping Google Play Protect enabled, and carefully reviewing permission requests from new apps. Avoid granting accessibility or screen-recording permissions unless absolutely necessary, and consider using a reputable mobile security app for additional protection.
