Security researchers at ThreatFabric discovered a new Android banking trojan called Hirudo that replaces real banking apps with trojanized copies. The malware currently targets eight Indonesian banking apps but could expand to other countries soon.