New Banking Trojan Uses Fake Security Apps to Evade Detection

Cybersecurity researchers this week flagged a new Android banking trojan spreading through third-party app stores and phishing links, masquerading as “security” or “system cleaner” tools. Once installed, the malware requests accessibility permissions, then silently overlays fake login screens on top of legitimate banking, UPI, and wallet apps to harvest credentials and one-time passcodes. The trojan also uses encrypted command-and-control channels and scheduled “sleep” periods to reduce its network footprint and evade basic anomaly detection. Banks have begun issuing alerts to customers, warning them to only install apps from official stores and to carefully review permission requests. For mobile users, the incident reinforces a critical message: not every app claiming to protect you is a friend—some are carefully disguised gateways for financial theft.

11-11-2025