News Summary

• Hirudo is a new Android banking trojan that works by replacing legitimate banking apps with purpose-built patched versions.
• Dutch mobile security company ThreatFabric said it identified replacements for eight Indonesian banking apps.
• The malware is delivered by shopping, adult video, and entertainment dropper apps that carry the trojan as a separate installation package, which is then served as an in-app update.
• It's worth emphasizing that Hirudo is installed as a second app and must be granted its own permissions before it can carry out the malicious activities.