Android users are being urged to exercise extreme caution when installing new apps after security researchers uncovered a vicious new malware campaign. The latest attack installs a dangerous banking trojan known as BeatBanker, which can steal financial information and even secretly monitor infected devices. Once downloaded, the malware is fully capable of capturing banking credentials, recording the phone’s screen, and even remotely accessing the device’s camera.

So, how are people getting caught out by this new bug? According to Kaspersky researchers, the attack relies on a deceptive trick that targets unsuspecting users. Victims are encouraged to download what appears to be an official version of apps such as Elon Musk’s Starlink. These fake applications are designed to look just like the real thing.

To make it appear even more convincing, the malware also spreads through websites designed to imitate the Google Play Store, disguising itself as a trustworthy download.

So far, the threat has mainly been detected in countries such as Brazil and has not yet been widely reported in the United Kingdom or elsewhere in Europe. Even so, experts warn that the campaign underscores the importance of caution when installing apps, especially from unofficial websites.

Kaspersky says it’s vital to follow three rules: only download apps from official sources, take time to review the permissions the app requests, and make sure phones are updated with the latest security updates.

To reduce the risk of infection, Kaspersky recommends following several safety steps:

• Download apps only from official sources. Always install apps through the Google Play Store or your device manufacturer’s official app marketplace, and verify the developer before downloading.

• Review app permissions carefully. Pay attention to requests for sensitive permissions, particularly those involving accessibility features or the installation of third-party software.

• Keep your device updated. Regularly install the latest Android security updates and ensure your mobile antivirus software is up to date.