Security researchers found an Android Trojan acting as a performance - boosting app to deliberately steal from people ’s bank accounts . ESET discovered it in third - party app stores . The malware generates a fake Android security option through which users inadvertently give it access . It's a form of phishing that tries to trick users into entering payment card details on a screen that appears to belong to a legitimate app. If the victim ’s device has PayPal ’s app they will be asked to log in . The malware uses that information to transfer money out of an account , bypassing even two - factor authentication . It fails if the user has a low balance or no funding source . The malware also has a payment feature imitating legitimate apps to get payment online .
Security researchers found an Android Trojan acting as a performance - boosting app to deliberately steal from people ’s bank accounts . ESET discovered it in third - party app stores . The malware generates a fake Android security option through which users inadvertently give it access . If the victim ’s device has PayPal ’s app they will be asked to log in . The malware uses that information to transfer money out of an account , bypassing even two - factor authentication . It fails if the user has a low balance or no funding source . The malware also has a payment feature imitating legitimate apps to get payment online .