Anatsa banking Trojan reappeared through apps on #Google Play

Detected by ThreatFabric in November 2023, the campaign exhibits sophisticated tactics and impacts countries like Slovakia, Slovenia, and Czechia. Exploits AccessibilityService to install malicious payloads, with a unique focus on Samsung devices.
🛑 Google Play has removed the five identified apps related to the Anatsa campaign.

➡️ These include -
• Phone Cleaner – File Explorer (com.volabs.androidcleaner)
• PDF Viewer – File Explorer (com.xolab.fileexplorer)
• PDF Reader – Viewer & Editor (com.jumbodub.fileexplorerpdfviewer)
• Phone Cleaner : File Explorer (com.appiclouds.phonecleaner)
• PDF Reader : File Manager (com.tragisoap.fileandpdfmanager).

#ITNews | Source | @Tech_maker
@HubCollabs