Spyware Malware Campaigns Target Messaging App Users, A Mobile Security Alert

Researchers uncovered FvncBot, an Android banking trojan masquerading as a banking-security app that leverages accessibility and VNC features to capture keystrokes, stream device screens, and inject fraudulent transactions directly from compromised devices; because it operates inside legitimate banking apps it can bypass conventional checks and evade detection, underscoring the need for minimal permissions, careful app sourcing, and real-time behavior monitoring for mobile banking security.