New Wave of Android Marcher Malware Uncovered

Marcher (Android banking Trojan) is actively distributed via fake Adobe Flash APK droppers and ad redirects; it hides its icon, registers infected devices with remote C2s, and targets over 40 financial and commerce apps by loading remote-hosted overlay login pages to harvest credentials. The variant is heavily obfuscated with low AV detection; the report includes dropper URLs and C2 indicators and recommends restricting installations from unknown sources.