detection icon

Short bio

Android/Trojan.Dropper.Xeno is Malwarebytes’ detection name for a modular Android banker Trojan.


Android/Trojan.Dropper.Xeno needs Accessiblity Services privileges, which it insistently requests after being started.

Type and source of infection

Android/Trojan.Dropper.Xeno opens an overlay for legitimate banking apps, mail clients, and cryptocurrency wallets. It uses these overlays to send entered data like usernames and passwords to the threat actor. Android/Trojan.Dropper.Xeno was available in the Google Play Store.


Malwarebytes for Android protects against Android/Trojan.Dropper


These apps can be uninstalled using the mobile devices uninstall functionality, the tricky part is identifying the offending behavior and app. That is where Malwarebytes for Android can help by identifying these apps and remove.


App name:

  • Fast Cleaner


  •      Main C2
  •      Backup C2
  •         Backup C2
  •      Backup C2
  •               Overlay C2

Package names Fast Cleaner:

  • com.census.turkey
  • com.laundry.vessel
  • com.tip.equip
  • com.spike.old