New Android Banking Trojan Disguised as Google Play App Steals Data

A new Android banking trojan named Antidot, discovered by Cyble, disguises itself as a Google Play update to steal sensitive information. It tricks users into sideloading it via APK files from third-party sources or through phishing emails and texts. Once installed, it uses accessibility settings to gain control and perform overlay attacks to capture login credentials. Users are advised to be cautious of phishing attempts, use strong antivirus software, download apps from trusted sources, and regularly update their devices to protect against such threats.