Escobar malware steals Google Authenticator multi-factor authentication codes, and this malware is the remake of the Aberebot Android banking trojan. This new version of Aberebot Android banking trojan has been detected with a name and icon similar to the legitimate anti-virus app McAfee, and it enables its operators to perform the following tasks:
– Using VNC take control of the infected Android devices.
– Recording audio
– Taking photos
– For credential theft, expand the set of targeted apps.
