Fake Google Chrome update

This report describes an active Android infostealer masquerading as a Google Chrome update (Update_chrome.apk) distributed via short-lived, domain-squatted URLs; once installed it requests device-admin privileges, kills antivirus processes, registers to a C2 (http://varra.top/tapas/gtgtr.php), harvests SMS, call logs, browser and banking information, presents fake payment screens to capture card data, and prevents deactivation (requiring factory reset to remove).