China's CVERC warns of Android banking trojan posing as education and training apps

CVERC warned it captured Android trojans in China posing as education and training apps, which after installation trick users into granting background-run and accessibility permissions ^[1][2]. The trojan is a new financial-theft variant that can intercept SMS, steal contacts and phone passwords, turn on the camera and record screen and audio; CVERC says criminals may spread it via SMS, WeChat links and QR codes using summer-training themes ^[1]. CVERC advises downloading apps only from official sites or legitimate app stores, not via links or QR codes in SMS, social media or cloud drives, and refusing any device-admin, background-run or accessibility permission requests during installation ^[1].

Industries mainly affected: Finance, Education

1. Download apps only from official sites or legitimate stores, never via SMS, social, cloud-drive links or QR codes ^[1].
2. Refuse device-admin, background-run and accessibility permission requests during installation .