This dangerous new Android malware disguises itself as a VPN or IPTV app - so be on your guard

An Android phone being held in the hand.

• Klopatra malware steals banking and crypto data, even when screen is off
• Distributed via fake IPTV+VPN app, requests Accessibility permissions for full device control
• Uses Virbox, anti-debugging, and encryption to evade detection and analysis

Cybersecurity researchers Cleafy have discovered a new, powerful Android trojan capable of stealing money from bank apps, stealing crypto from hot wallets, and even using the device while the screen is off.