ThreatFabric also says that the way Vultur approaches gathering data is different from past Android trojans.

It doesnt superimpose a window over the app to collect the data you enter into the app.

According to ThreatFabric, Vultur works by relying heavily on Accessibility Services found on the Android gear.

Someone holds up an Android phone

Daniel Romero / Unsplash

The biggest threat Vultur brings is that it records the screen of the Android machine it’s installed on.

Using the Accessibility Services, it keeps track of what system is running in the foreground.

ThreatFabric

Additionally, ThreatFabric researchers say vulture interferes with traditional methods of installing apps.

An illustration of how Vultur works when installed on Android devices

ThreatFabric

As such, users only should install trusted apps on their Android devices.