ANATSA ANDROID BANKING TROJAN HITS 90,000 USERS WITH FAKE PDF APP ON GOOGLE PLAY

Summary from the TLDR InfoSec newsletter

Anatsa banking malware targeted North American users through a malicious "Document Viewer" app on the Google Play Store that was downloaded 90,000 times. The Trojan, disguised as a PDF, updates displays with fake maintenance notices during banking app access while stealing credentials through overlays and keylogging.