Anatsa Android Trojan Targets Banking Users in Multiple Countries, Drains Accounts.

The Android banking trojan Anatsa is being distributed via the Google Play Store, with over 30,000 installations in the US, UK, Germany, Austria, and Switzerland. The trojan collects financial information by overlaying phishing pages on legitimate banking apps and via keylogging. Anatsa supports targeting nearly 600 financial apps from around the world and uses the stolen information to perform on-device fraud. Users are advised to be vigilant when installing apps on Android devices and to avoid apps from dubious publishers. Google has removed the identified malicious apps from the Play Store and banned the developers.