An Android malware posing as a battery optimization tool relies on a sneaky tactic to find its way into users' PayPal accounts and steal their money, despite two-factor authentication protection. It simply prompts them to log into the app.
The fake app can also run overlay attacks on Google Play, WhatsApp, Skype, Viber, Gmail, and bank apps with the purpose of phishing payment card details and login credentials.
Sneaky tactic to steal PayPal funds
The app is available from unofficial third-party stores and goes by the name Optimization Android. Once launched, the app closes and hides its presence. It offers no functionality.