Hirudo represents a major evolution in Android banking malware: instead of overlays, it fully replaces targeted apps with patched copies that bypass https://deafnews.it/en/article/hirudo-the-trojan-that-deceives-banking-apps-from-within-by-replacing-them-with-patched-copies