An Android malware campaign was previously discovered that distributed banking trojans targeting four major Iranian Banks: Bank Mellat, Bank Saderat, Resalat Bank, and Central Bank of Iran.  There were 40 credential-harvesting applications circulated on Cafe Bazaar between December 2022 and May 2023.

Source: GBHackers