"A New Android bug, Strandhogg 2.0, Lets Malware Pose as Real Apps and Steal User Data"

Researchers at a security firm called Promon, have discovered a new vulnerability, called Strandhogg 2.0.  This vulnerability affects all devices running Android 9.0 and earlier.  This vulnerability lets malware imitate legitimate apps to steal app passwords and other sensitive data.  The user would have to download a malicious app (disguised as a normal app) to exploit the Strandhogg 2.0 vulnerability.  

TechCrunch reports: "A New Android bug, Strandhogg 2.0, Lets Malware Pose as Real Apps and Steal User Data"