Another fake banking app found on Google Play.
This is testing version of banker with implemented functionality to steal text messages (to bypass SMS 2FA). For now, it can't steal login credentials.
Targets @Fio_banka users from #CzechRepublic 🇨🇿
Found by @0_1_0_1_0_0_0_0!
#XSS mini-challenge: escape the unescapable (or is it?) <plaintext> tag. IE only (AFAICT). http://t.co/4NSCelw0z2<script>alert(1)</script>