Hirudo Android Trojan Swaps Banking Apps for Patched Versions

ThreatFabric disclosed a new Android banking trojan called Hirudo that replaces legitimate banking apps with purpose-built patched versions to bypass in-app security checks. Replacements for eight Indonesian banks were identified.

• Hirudo trojan swaps banking apps for patched builds
• Patched versions bypass security checks from inside the app
• ThreatFabric found replacements for eight Indonesian banks