New Android RAT 'Hirudo' Swaps Banking Apps with Trojanized Versions

Security researchers have identified a novel Android remote access trojan (RAT) named 'Hirudo' that replaces legitimate banking applications with trojanized copies, combining banking trojan and full RAT capabilities. The malware's distribution method and full impact remain unclear, but it represents an evolution in mobile financial malware. This matters as it could enable credential theft and unauthorized transactions on a wide scale, targeting financial institutions and their customers.