Android PINs have been targeted for exfiltration by some of the 40 newly discovered TrickMo Android banking trojan variants, which have one-time password interception, data and credential theft, screen recording, accessibility service exploitation, and automated permission granting capabilities. Fake unlock screens have been utilized by the novel TrickMo variants to compromise Android users’ unlock patterns or PINs, a Zimperium analysis showed.

Source: SC Magazine