Anatsa
Aliases: ReBot, TeaBot, Toddler
- First seen
- 2021-01-01 00:00:00
- Malware type
- trojan, credential-stealer
- Family
- Malware family
- Last IoC activity
- 2026-07-02 20:24:27
- Profile updated
- 2026-07-07 14:03:33
Targeted industries: financial-services
Targeted regions: country_code:es country_code:it country_code:de country_code:nl
Context
Anatsa, also known as ReBot, TeaBot, and Toddler, is a banking Trojan targeting Android devices in multiple European countries. It is primarily used to steal banking credentials and intercept SMS for two-factor authentication.
Reports & references
- threatfabric.com — Deceive The Heavens To Cross The Sea (report)
- malpedia.caad.fkie.fraunhofer.de — Apk.Anatsa (report)
- buguroo.com — Buguroo Malware Report Toddler En (report)
- cleafy.com — Teabot (report)
- threatfabric.com — Smishing Campaign In Nl Spreading Cabassous And Anatsa (report)
- twitter.com — 1394958795508523008 (report)
- bitdefender.com — New Flubot And Teabot Global Malware Campaigns Discovered (report)
- zscaler.com — Android Document Readers And Deception Tracking Latest Updates Anatsa (report)
- threatfabric.com — Anatsa Hits Uk And Dach With New Campaign (report)
- labs.k7computing.com (report)
- cleafy.com — Teabot (report)
- twitter.com — 1416409813467156482 (report)
- blog.nviso.eu — Android Overlay Attacks On Belgian Financial Applications (report)
- gbhackers.com — Teabot Banking Trojan (report)
- threatfabric.com — Anatsa Trojan Returns Targeting Europe And Expanding Its Reach (report)
- labs.bitdefender.com — Threat Actors Use Mockups Of Popular Apps To Spread Teabot And Flubot Malware On Android (report)
- labs.k7computing.com — Play Store App Serves Teabot Via Github (report)
- prodaft.com — Toddler Tlpwhite V2 (report)
- thehackernews.com — Widespread Flubot And Teabot Malware (report)
- telekom.com — Flubot Under The Microscope 636368 (report)
- cleafy.com — A Stealthy Threat Uncovered Teabot On Google Play Store (report)
- cleafy.com — Teabot Is Now Spreading Across The Globe (report)