New 'Brokewell' Android Malware Spread Through Fake Browser Updates

ThreatFabric discovered Brokewell, a actively developed Android banking trojan distributed via fake browser updates and a freely available loader; the malware abuses Android accessibility to bypass protections, exfiltrates credentials and session cookies via overlays and WebView interception, and supports remote control, audio recording, screenshots, SMS/calls, app installation, and extensive device monitoring, while the publicly hosted loader lowers the barrier for other actors to adopt and distribute the trojan.