Banking and shopping apps and cryptocurrency wallets of users in the U.S. and Spain are under attack from the SOVA Android trojan. Though in its early stage, it’s been promoted on hacking forums with ads looking for malware testers. Security teams must act now and consider implementing a risk-based mobile security strategy.