Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

A new Android banking trojan called Hirudo replaces legitimate banking apps with patched versions that bypass the apps' built-in security checks from inside, The Hacker News reports. ThreatFabric found replacements for eight Indonesian banking apps, with credential targeting spanning Indonesia, China, India, Mexico, Morocco and Thailand, combining credential theft, device takeover and SMS theft.