Cybersecurity experts are warning Kenyans about a new malicious fake VPN application that is being used to steal sensitive banking details from unsuspecting users. Disguised as a popular streaming app offering free access to films and live sports, this application actually installs dangerous malware known as Klopatra, an Android Remote Access Trojan (RAT).

• Over 3,000 devices across Europe have already been affected, with approximately 1,000 individuals incurring heavy financial losses.
• The malware exploits legitimate Android Accessibility Services to gain full control of infected devices and access banking apps, passwords, and transfer funds.
• The campaign is believed to have originated from Turkey and poses a significant threat to markets like Kenya, where third-party streaming apps are increasingly popular.