Fake Chrome Updates Hide Android Brokewell Malware Targeting Your Bank

Brokewell is an Android banking trojan distributed via fake app updates (masquerading as Chrome updates) that performs overlay attacks and uses a loader to bypass Android 13+ accessibility protections; it steals credentials and session cookies, exfiltrates call logs, messages, contacts, and supports remote-control and spyware features. ThreatFabric researchers report Brokewell is under active development and has been observed in campaigns targeting financial services (e.g., Klarna) and national authentication apps, with recommendations to avoid sideloading apps and to install apps only from official stores.