New Android Banking Trojan Herodotus Mimics Human Behavior

Cybersecurity researchers have identified a new Android banking trojan called Herodotus, which mimics human behavior to evade detection. The malware, distributed via SMS phishing, uses accessibility services to steal credentials and 2FA codes. Herodotus introduces random delays in text input to appear human-like, making it harder for behavioral biometrics to detect fraud. The malware targets financial apps and cryptocurrency platforms, indicating a broad campaign. Researchers warn that Herodotus poses new challenges for banks and payment providers, necessitating layered security measures.