20.
From Firebase to agentic AI: One prompt away from the scam pipeline endgame ↗
What happened
- The article reports that in August the Indian Cyber Crime Coordination Centre flagged 57 Firebase-hosted operations impersonating banks, rising to 216 by Sept. 20.
- The article reports that Zimperium researchers identified Arsink RAT, which infected approximately 45,000 devices across 143 countries.
- The article reports that BioCatch's 2026 global survey of fraud and risk leaders across 25 countries found 80% of respondents had already faced an attack carried out by AI agents.
- The article reports that RatHat lets an AI assistant interact with an infected phone in real time via Android accessibility services.
- The article reports that nine out of every 10 scams now originate from a mobile device, per BioCatch's 2026 Global Scams report.
Why it matters to Signicat
- Mobile-device scam origination and AI-agent attacks on banking apps bear on mobile authentication and fraud-detection demand in Signicat's banking markets; relevance is indirect because the article is a threat narrative rather than a product announcement.
Evidence from the source (6 quotes)
- “In August, the Indian Cyber Crime Coordination Centre flagged 57 of these Firebase-hosted operations impersonating banks. By Sept. 20, that number had jumped to 216” source ↗
- “Researchers at Zimperium identified a separate Android malware operation called Arsink RAT that infected approximately 45,000 devices across 143 countries.” source ↗
- “BioCatch's 2026 global survey of fraud and risk leaders across 25 countries found that 80% of respondents had already faced an attack carried out by AI agents.” source ↗
- “Using Android's accessibility services, the AI can determine where to tap and scroll as it navigates banking apps” source ↗
- “Our 2026 Global Scams report shows nine out of every 10 scams today now originate from a mobile device.” source ↗
- “financial institutions are already seeing the threat firsthand” source ↗
Fraud deepfake injectionAuthentication passwordlessAgentic AI identityThought leadershipResearch reportGlobal
5 of 5 facts verified against the source · confidence medium · claude-haiku-5-5