New Brokewell malware takes over Android devices, steals data

Security researchers uncovered Brokewell, an actively developed Android banking trojan distributed via fake Chrome update pages that can steal credentials and session data, capture touch/input and audio, stream the screen, and perform remote interactions on infected devices; a loader linked to the developer 'Baron Samedit' bypasses Android 13 Accessibility protections and is being used by multiple criminals, raising risk of broader malware-as-a-service distribution.