Italian cybersecurity company Cleafy has discovered an Android Trojan called "Nexus" that is capable of hijacking online accounts and stealing funds from them, targeting customers of 450 banks and cryptocurrency services around the world. The Trojan was found to use Android's "Accessibility Services" feature to steal private keys and balance information of cryptocurrency wallets, cookies of target websites, and two-factor authentication (2FA) of the Google Authenticator app. (CSO Online)