Anatsa Android malware downloaded 150,000 times via Google Play

The report details a Google Play–hosted campaign distributing the Anatsa banking trojan to users across several European countries via fake PDF viewers and cleaner apps; operators used a multi-stage downloader and abused Android's AccessibilityService to install the infostealer, with an estimated 150k–200k downloads. Google removed most apps and users are advised to scrutinize permissions and publishers to reduce risk.