You might want to avoid updating Google Play when prodded

What's the oldest trick in the book to get people to do something they might not otherwise do? Pretend to be someone you are not. That's exactly what the Antidot banking trojan is doing. To lure Android users into downloading it, it's masquerading as a Google Play update application.

While it's generally recommended that you keep your phone and your apps up to date, you must be very vigilant when downloading an update and not fall for a fake update warning, which may come from cybercriminals like the ones behind Antidot.

Security researchers at Cyble (via Tom's Guide) first came across Antidot on May 6. It's a banking trojan, crafted to gain access to your financial accounts to steal funds.

Once you download the Google Play Update app, a fake update page with a "Continue" button is displayed on the screen. The page will use German, French, Spanish, Russian, Portuguese, Romanian, or English, depending on where you live.

If you tap on the button, you are taken to the Accessibility settings. Like many other banking trojans, Antidot is dependent on the Accessibility service to perform its intended activities. After permissions are granted, an ID is generated for your device.