A free VPN app is secretly spying users’ screens before raiding their bank accounts.
At least 3,000 devices are thought to have downloaded Modpro IP TV + VPN, according to cyber security Cleafy.
They found a piece of dangerous malware called Klopatra which was hiding within the app with a ‘signigicant evolution’ from before.
It can now take control of devices remotely and steal account details.
Cleafy said: ‘Once the main Klopatra payload is installed, the real threat manifests.
‘The malware immediately requests a wide range of permissions, but one is crucial for its success: the Android Accessibility Services permission.
‘Accessibility Services are a powerful framework designed to assist users with disabilities.
‘They allow applications to read screen content and perform actions on