BYOD is the new attack surface

These trojans use Android's accessibility services to overlay fake login screens and steal credentials and session tokens for business apps — not just banking ones.

Reduce the risk

  • Require managed access (MDM/MAM) for business apps on personal devices
  • Block sideloading; restrict to vetted app sources
  • Enforce MFA and short session lifetimes
  • Separate work and personal data with app protection policies

We help teams roll out mobile and identity controls without making phones unusable.