New Octo2 Android Banking Trojan Emerges with Device Takeover Capabilities

Cybersecurity researchers have discovered a new version of the Android banking trojan Octo, called Octo2, which has enhanced capabilities for device takeover and fraudulent transactions. Dutch firm ThreatFabric spotted campaigns distributing Octo2 in a handful of European countries. The malware is embedded in several mobile apps and has been linked to malicious actors known as Architect and goodluck. Octo2’s operating model has shifted to Malware-as-a-service, allowing it to be rented out to other cybercriminals.