Threat actors are taking advantage of Android’sWebAPK technologyto trick unsuspecting users into installing malicious web apps on Android phones that are designed to capture sensitive personal information. “The attack began with victims receiving SMS messages suggesting the need to update a mobile banking application,” researchers from CSIRT KNFsaidin an analysis released last week. “The