Kaspersky Lab discovered a new strain of the Svpeng Trojan delivered through news sites using Googles AdSense via a zero-day in Chrome. Researchers determined that the malicious payload served via ads were automatically downloaded to Android mobile devices, without any warning to the victim. The latest versions of Trojan-Banker.AndroidOS.Svpeng is limited to Russia and the CIS. The company reported the incident to Google that developed a patch to fix the flaw in Google Chrome, the security update will become available to users the next time the browser is updated.”]
Source: https://securityaffairs.co/wordpress/53258/malware/svpeng-trojan.html