Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play

Cybersecurity researchers have uncovered a new Android banking malware campaign using the Anatsa Trojan to target North American users through malicious apps on Google Play. The malware employs deceptive overlays and fake maintenance notices to steal banking credentials and conduct fraudulent transactions. #Anatsa #GooglePlayStore

Keypoints

Anatsa malware is distributed via malicious apps disguised as legitimate tools on Google Play Store.
The campaign targets banking customers in the United States and Canada, expanding its reach.
The malware employs overlays, keylogging, and device-takeover techniques for credential theft and fraud.
Malicious apps initially appear legitimate and later covertly embed Anatsa after gaining user trust.
The malware’s ability to display fake maintenance notices helps delay detection and facilitates fraud.