BankBot’s newest version ducked detection in Google Play by downloading its payload from an external source, according to a report by researchers at Avast, SfyLabs, and ESET, which made the discovery. Once installed, BankBot will wait for a user to launch a legitimate banking app on his or her device and then overlay a copycat version of the app.

Read full news article on Dark Reading