New YuanKong Android RAT Hijacks Phones to Steal Banking PINs and Passwords

A newly analyzed Android remote-access Trojan called YuanKong can watch and control a victim’s phone, capture passwords and payment PINs, and send stolen information to operators. Rather than relying on access to text messages or contact lists, it uses Android’s Accessibility features and screen controls to observe what people do inside apps, including banking and payment apps. Researchers warn that this approach can expose sensitive information even when the user is interacting with a genuine app. The malware is also built to stay active and give operators control from afar. Its capabilities include screen capture, remote taps and swipes, clipboard access, notification reading, file transfers and location collection....

Read the full article at the source.