Researchers describe an Android banking Trojan known as Gigabud that can duplicate a legitimate banking app into a separate work profile on an infected phone. The hidden clone lets attackers carry out fraudulent transactions while keeping them out of the victim's view. The technique targets ordinary phone users' financial accounts and credentials.
Read the full story at Malwarebytes Labs