Group-IB says the Mirax Android RAT infected thousands of banking phones in the META region, enabling remote control and fraudulent transfers.