Octagon Can Steal SMS One-Time Codes During Banking and Crypto Account Takeovers
Brief
Octagon is an Android theft tool that turns an infected phone into a platform for account takeover.
It can steal login details, watch the screen, and capture verification codes that banks and exchanges use to protect accounts.
It is sold as a service, making financial fraud tools available to more criminals. Victims are lured into installing an Android app outside official stores, often one disguised by an unrelated theme, a fake store page, or a believable public-service message.
Analysts at iVerify identified Octagon in June 2026 and linked it to a Russian-speaking seller known as AndroidKitKat.
iVerify said in a report shared with Cyber Security News (CSN) that the operation appeared on a Russian-language cybercrime forum on June 1.
Its advertised $1,400 monthly price and ready-made control panel make it notable beyond any one campaign.