A malicious Android app has been uncovered on the Google Play app marketplace that is distributing the banking trojan, Cerberus. Once executed, the malware has the capabilities to steal victims bank-account credentials and bypass security measures, including two-factor authentication (2FA) The app has 10,000 downloads and is only the latest malware family to be discovered on a legitimate app marketplace. Google has not responded to Threatpost’s request for further comment on whether the app is still available on Google Play.
Source: https://threatpost.com/cerberus-banking-trojan-unleashed-google-play/157218/