New Trojan “Sturnus” Elevates Android Messaging and Banking Risks

Sturnus is a newly disclosed Android banking trojan capable of full device takeover: it captures decrypted chats from apps like WhatsApp, Telegram, and Signal by reading screen output and performs overlay attacks to steal banking credentials and enable fraudulent transactions. The malware is typically delivered via malicious APKs or social-engineering lures, underscoring elevated risks to mobile endpoints even when secure messaging is used.