Banking Trojan Highlights Gaps in Mobile Protection

A newly identified Android banking trojan is being distributed via SMS links and disguised as legitimate apps; it abuses permissions and overlay techniques to steal credentials while evading signature-based antivirus detection. The report emphasizes the limitations of traditional AV and recommends behavior-based mobile security and continuous monitoring of app behavior, permissions, and network activity.