Vultur banking malware for Android poses as McAfee Security app

**Executive summary:** Researchers documented a new, more evasive Vultur Android banking trojan variant delivered through smishing and social-engineered phone calls that tricks victims into installing a trojanized McAfee Security app; the dropper loads multiple encrypted payloads enabling screen recording, keylogging, comprehensive remote control (gesture injection, app blocking), encrypted C2 communications and native-code payload decryption, and has been observed targeting many banking apps across multiple countries.