A new Android malware known as MasterFred uses fake login overlays to steal credit card information of Netflix, Instagram, and Twitter users. Avast Threat Labs researchers discovered APIs provided by the built-in Android Accessibility service to display the malicious overlays. The malware also uses the Onion2Web gateway (aka Tor2Web proxy) to deliver the stolen information to Tor network servers under its operator’s control. At least one of the malicious apps bundling the MasterFred banker was recently available in Google’s Play Store.”]