IBM X-Force researchers say a new Android banking trojan targets banking customers with overlay attacks to steal their bank credentials and ultimately take over their accounts. The malware, dubbed Banker.BR, was spotted in messages targeting users in countries that speak Spanish or Portuguese (including Spain, Portugal, Brazil and other parts of Latin America) Researchers said the malware is under continual development, and they warned of extended overlay capabilities and code enhancements in the coming months. Researchers say the malware isn t obfuscated, making it easier to reverse-engineer, and the trojan does not verify whether it is running in a virtualized environment before it installs on a device.
Source: https://threatpost.com/android-banking-br-trojan-credential-stealing/154990/