New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new variant of the GhostBat Android remote access trojan targets 60 banking, UPI and payment apps used in India and uses transparent overlays to capture PINs as victims type them into genuine apps such as Google Pay and MobiKwik, according to Cyble research reported by GBHackers. The malware spreads through mParivahan- and eChallan-themed smishing, and Cyble identified at least six different loader approaches.