Fake VPN and streaming app drops malware that drains your bank account

Security researchers are warning Android users to delete a fake VPN and streaming app that can let criminals take over their phones and drain their bank accounts, with the app Mobdro Pro IP TV + VPN identified as malicious sideloaded software.

Their analysis, according to Cleafy, found it installs Klopatra, a new Android banking Trojan and remote‑access tool with no links to known malware families, giving attackers full control of infected devices and the ability to steal credentials and carry out fraudulent transactions. The infection chain starts with social engineering and culminates in a full device takeover, a description quoted from the researchers.

The piece notes that the lure hinges on pretending to be an IPTV app offering free channels, and explains that sideloading is common because users expect such content from unofficial sites, bypassing Google Play protections. It also highlights that even genuine VPNs can carry risks, pointing to findings from the VPN Transparency Report 2025 by the Open Technology Fund about concerning apps and practices.

Practical steps include sticking to trusted sources, checking app permissions, and using up‑to‑date protection, such as real‑time anti‑malware for Android, along with keeping devices patched and informed about the risks. If affected, users are advised to delete suspicious VPN or IPTV apps and reset banking credentials. according to the Open Technology Fund.