Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

Researchers have identified a new Android banking trojan called Hirudo that evades security measures by using modified versions of legitimate banking apps. These patched apps are designed to bypass internal security checks, allowing the trojan to operate undetected. The trojan was found to have replacements for eight Indonesian banking apps. This approach represents a new level of sophistication in financial fraud. The discovery was made by ThreatFabric, a Dutch mobile security company. The use of patched banking apps enables Hirudo to circumvent security controls from within the app itself.