Antivirus vendor Malwarebytes reported a new hacking campaign hit Korean users, the new malicious code, Dubbed Android/Trojan.Bank.Wroba, was distributed via file sharing websites and third party app stores alternative in the last months. Wroba disguises itself as the Google Play Store app and run as a service in the background to monitor events on the host device, catch incoming SMS, monitor installed apps and communicate with a remote server. To avoid the Wrob malware, and not only it, security experts suggest to download applications only from reputable markets.”]
Source: https://securityaffairs.co/wordpress/19041/malware/android-wroba-trojan-korea-banks.html