GoKawiilNew Hirudo Android malware swaps banking apps to steal credentials
Security researchers have identified a new Android malware strain called Hirudo that replaces legitimate banking apps with modified versions. These tampered apps disable built-in security checks, allowing the malware to capture users' bank account credentials.
GoKawiil's interpretation of the reporting above, not reported fact.
By disguising itself as a trusted banking app rather than a separate malicious program, Hirudo could bypass user suspicion and some device-level security protections, researchers suggest. This technique may make detection harder for both users and standard antivirus tools, potentially increasing the risk of financial fraud for affected Android users.
- Hirudo is a newly discovered Android malware targeting banking app users.
- It replaces genuine banking apps with modified versions that disable security checks.
- The malware is designed to harvest login credentials for bank accounts.
Bitdefender Mobile Security for Android — Given malware like Hirudo targets Android devices by swapping out legitimate banking apps, having a dedicated mobile security app adds a layer of real-time scanning and app integrity checks. Bitdefender Mobile Security monitors installed apps and web traffic to help catch malicious or tampered apps before they can steal your credentials. It's a practical step for anyone doing mobile banking to reduce exposure to this kind of threat.
See Bitdefender Mobile Security for Android on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-14
Published there as: “Hirudo Android malware replaces banking apps to evade security checks”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.