New banking malware can stealth-hack your Android phone: Here’s how to stay

[phillynews215]

Credit: Hadlee Simons / Android Authority


TL;DR

• A malware, called “Sturus,” has emerged, and it exploits Android’s accessibility features to spread on your phone even without you noticing.
• It gains access to your Android after being installed via an APK file, and then monitors your phone’s interface, chats, and even button presses.
• It then recreates fake banking app UIs to steal your banking data, and places restrictions that prevent it from being uninstalled.

Update, November 25, 2025 (11:27 AM ET): Google has reached out to Android Authority with a statement regarding the Sturnus malware. A spokesperson tells us:

Based on our current detection, no apps containing this malware are found on Google Play. Android users are automatically protected against known versions of this malware by Google Play Protect, which is on by default on Android devices with Google Play Services. Google Play Protect can warn users or block apps known to exhibit malicious behavior, even when those apps come from sources outside of Play.

More...