An Android malware is disabling biometric features like face unlock to steal your PINs

The Chameleon Android banking trojan is a shapeshifting malware capable of stealing PINs and passwords by blending into legitimate apps, often Google Chrome. Delivered via the Zombinder service, it can trick users into enabling unauthorized access and bypassing security features on Android 13 and later devices. Cybersecurity experts warn against downloading APKs from unofficial sources and advise regular device scans using reliable antivirus software to protect against such threats.