Android Malware Campaign Pushes Anatsa Banking Trojan, Targeting Customers From USA And Europe

A new Android malware campaign, known as Anatsa or TeaBot, has been spreading since March 2023, targeting banking customers in the U.S., U.K., Germany, Austria, and Switzerland. The goal of the malware is to steal banking credentials and perform fraudulent transactions through device takeover. Over 30,000 installations of Anatsa-infected apps have been found on the Google Play Store, indicating that it has become an effective distribution method for the malware, which has been posing as innocuous utility apps. This trojan is highly capable, with backdoor functionalities, overlay attacks, and the ability to bypass fraud control mechanisms for unauthorized fund transfers. Read more...