Faketoken

FakeToken is an Android banking Trojan family tracked for years in mobile threat reporting as a recurring but lower-volume financial malware strain relative to dominant contemporaries such as Asacub, Svpeng, Agent, and later Mamont. It targets Android devices and is classified in vendor naming as a mobile banker, indicating functionality centered on financial fraud against mobile users. FakeToken has repeatedly appeared in rankings of Android banking malware families observed in the wild, including detections under multiple variant names. Its activity places it within the broader ecosystem of Android financial malware that abuses mobile devices to compromise banking-related workflows and steal money or sensitive financial data from victims. The family has been observed in user telemetry alongside other Android banking Trojan families, but the available information here does not establish a specific threat actor, delivery chain, or distinct technical behaviors beyond its role as a banking Trojan on Android.