PhishingReviewed
Android malware posing as Rakuten spread via eight domains including acidw.com
Security researcher @masaomi346 posted on X on 12 November 2026 about Android malware impersonating Rakuten (楽天), the Japanese e-commerce and financial services group, linking a VirusTotal analysis of the sample. The…
- acidw.com
- Also acpdns.com, aelogo.com, ancreda.com, armoky.com, rebenz.com, rainsu.com, risooo.com
- eu.cc fine/malware smishing cluster (12 Nov 2026)
Reported Nov 12, 20261 report