A recent investigation uncovered an ongoing fraud campaign abusing the Copybara Android banking trojan to perform unauthorized bank transfers via instant payments. Threat actors exploited social engineering and remote access capabilities to infect devices and orchestrate on-device fraud undetected.