90+ Malicious Apps Totaling 5.5M Downloads Lurk on Google Play

Zscaler researchers discovered more than 90 malicious Android apps on Google Play (over 5.5 million installs) used as droppers to distribute the Anatsa (Teabot) banking Trojan and other malware; the threat uses C2-delivered staged payloads, sandbox checks, and overlay/accessibility abuses to steal credentials from 650+ financial apps and is actively targeting users across Europe, the US, UK, South Korea and Singapore, prompting recommendations for zero-trust controls and stricter enterprise mobile app hygiene.