I would like to see an analysis of this third party Android app the victim downloaded. It seems like the creators of this malicious app found a way to break ou

I would like to see an analysis of this third party Android app the victim downloaded. It seems like the creators of this malicious app found a way to break out of the app sandbox [1] and obtain root access. From there getting access to other apps was trivial. Why the Hong Kong bank fraud detection did not block these transactions or freeze the account for suspicious activity is another issue. I think Google should reach out here and get more information. Perhaps give this woman a lifeline. Something like this shouldn’t be possible. [1] https://source.android.com/docs/security/app-sandbox https://source.android.com/docs/security/app-sandbox