GXC Team Unmasked The cybercriminal group targeting Spanish bank users with AI-powered phishing tools and Android malware

Group-IB discovered a Spanish-speaking criminal group GXC Team offering a sophisticated AI-powered phishing-as-a-service platform targeting Spanish bank customers. The group specialized in developing phishing kits Android malware and AI-powered scam tools. Their malicious Android app disguised as a banking application was designed to intercept OTP codes affecting users of over 36 Spanish banks and 30 institutions worldwide. Despite not being highly sophisticated GXC Teams innovative features such as bundling phishing kits with the Android malware and an AI-powered voice caller made them a severe threat to banking security in Spain.