Mobile security researchers atThreatFabricfound malware designed to steal people’s online banking passwords and two-factor authentication codes.
They said the malware also logged keystrokes and even took screenshots through people’s phones.
The apps even functioned just as advertised when users first downloaded them.
Once the apps were installed, though, they prompted people to update them.
