Trend Micro's Vit Sembera has analysed the Geost Android botnet
https://blog.trendmicro.com/trendlabs-security-intelligence/dissecting-geost-exposing-the-anatomy-of-the-android-trojan-targeting-russian-banks/ …
Geost was first analysed by researchers from the Stratosphere Lab in a #VB2019 paper
https://www.virusbulletin.com/blog/2019/10/vb2019-paper-geost-botnet-story-discovery-new-android-banking-trojan-opsec-error/ …pic.twitter.com/MM6xvIldJT