Hook Android Trojan Now Delivers Ransomware-Style Attacks

Zimperium warns of an evolved Hook Android banking Trojan variant that now includes ransomware-style full-screen device-lock overlays, fake NFC and payment-scraping overlays, lock-screen bypass tricks, transparent overlays to capture gestures, screen-streaming for real-time monitoring, and 107 remote commands; attackers are distributing malicious APKs via GitHub alongside traditional phishing, prompting recommendations to include mobile devices in enterprise endpoint defenses and to use on-device detection and behavior analysis.