Red alert! New Trojan Klopatra exposes bank fraudsters in Europe
A new Android banking Trojan called Klopatra threatens European users by infecting devices and draining accounts.

Red alert! New Trojan Klopatra exposes bank fraudsters in Europe
A new cybersecurity threat is causing alarm among Android users in Europe. The newly discovered banking Trojan called Klopatra has already infected over 3,000 mobile devices, particularly in Spain and Italy. According to a report by Italian cybersecurity firm Cleafy, the threat was noticed in late August 2025 and represents a significant evolution in mobile malware. This malware allows hackers to take control of mobile devices and drain bank accounts.
Klopatra's disguise is treacherous, as the malware poses as a legitimate app called Mobdro Pro IP TV + VPN, which promises to provide access to high-quality television channels. Users who are often looking for free or pirated streaming content install this app from unofficial sources to bypass the Google Play Store. Once installed, Klopatra requires numerous permissions and uses Android Accessibility Services to read information about the screen, record keystrokes and simulate taps.
How Klopatra works
The way Klopatra works is particularly perfidious. The malware can carry out transactions on its own as it is able to simulate taps and gestures to navigate banking applications and approve fraudulent transfers. To make the attack particularly effective, the attackers usually operate at night, when users' phones are usually charged and unattended. In these moments, they use stolen unlock patterns or PINs of those affected to gain access to sensitive data.
The threat poses a risk not only to individuals, but also to the entire financial sector in Europe. The organized Turkish-speaking criminal group that manages Klopatra is in full control of its operations, escalating the dangers facing mobile users.
In light of these developments, users are urged to remain vigilant. Installing apps from unreliable sources should be avoided and protecting personal information is a top priority. Cybersecurity experts recommend using official app stores and ensuring mobile devices are equipped with the latest security updates.
The Klopatra threat has also attracted international attention and continues to be closely monitored by various security analysts and reports. The relevance of the topic cannot be overestimated, especially since the number of affected users could continue to increase if no action is taken.