Google says no apps with the new Sturnus malware are on Google Play and Android devices are protected by default through Google Play Protect. The malware, discovered in malicious APKs, can read on-screen encrypted chats, mimic banking apps to steal credentials and take full control of a device using Accessibility permissions. Researchers warn it’s already active in parts of Europe despite being in early development. Since Sturnus spreads through fake apps and sideloaded APKs, the strongest protection is avoiding installs from outside the Play Store.
Source: Android Authority
