A new strain of malware called Octo2 is spreading across Europe, targeting Android phone users. Discovered by ThreatFabric, Octo2 disguises itself as popular applications like Google Chrome and NordVPN. Once installed, it allows hackers to control the device, capture on-screen activity, intercept messages, and log keystrokes, facilitating identity theft and phishing schemes. The malware is primarily distributed through unofficial app stores and currently affects users in Italy, Poland, Moldova, and Hungary, with potential for global spread. Octo2 is believed to be a successor to the original Octo trojan, which had a wide reach before its source code was leaked, prompting the development of Octo2. Users are advised to download apps only from the Google Play Store and remain vigilant about app permissions and developer credentials. Google Play Protect automatically protects Android users from known versions of this malware.