“Sneaky” new Android malware takes over your phone, hiding in fake news and ID apps

Researchers analyzed an Android banking Trojan distributed via fake apps that requests Accessibility and Device Administrator privileges, uses overlays to capture banking/crypto credentials, suppresses notifications, and communicates with a remote C2; the report includes multiple APK filenames and SHA-256 hashes and notes targeting of banking users in Southeast Asia.