Android Banking Malware Strikes Again: Anatsa’s Deceptive PDF Update Scheme Hits North America
Anatsa, the Android banking malware, is back at it again, this time targeting North American users. Masquerading as a “PDF Update,” it tricks users via the Google Play Store. Just when you thought your banking app was under maintenance, Anatsa is busy swiping your credentials like a Black Friday shopper.

Hot Take:
Who needs a PDF update when you’ve got a trojan named Anatsa waiting to steal your life’s savings? This malware is the ultimate multitasker—posing as a document viewer one second, and a financial magician the next, poofing away your funds faster than you can say “scheduled maintenance.”
Key Points:
- Anatsa malware is targeting North American Android users through the Google Play Store.
- The trojan disguises itself as a “PDF Update” for a document viewer app.
- The malware performs overlay and keylogging attacks to steal banking credentials.
- It has been downloaded approximately 90,000 times before being removed.
- ThreatFabric urges financial institutions to assess potential risks.
Already a member? Log in here