Many people use large and difficult passwords to protect their smartphones. Some use fingerprint and facial recognition technology to prevent password hacking.

However, a team of researchers from cybersecurity firm Threatfraebic said that the Chameleon Android banking Trojan malware can bypass the security measures of fingerprint and facial recognition technology to unlock the phone without the user's knowledge.

The malware can steal the security PIN of any phone and take control of it remotely. ThreatFreak reports that it has discovered a new version of the Chameleon Trojan malware.

The spread was via a fake Android app in Google Chrome. The malware was spread via fake apps from various organizations and banks across Australia in early April this year.

The malware can bypass the Google Play Protect Alert security system and collect device security codes. Even antivirus programs from different organizations are unable to detect this malware.

According to ThreatFreak, the latest version of the Chameleon Android banking Trojan malware can access any part of the phone at will. The malware can even steal passwords stored on the phone.

Therefore, for security reasons, cybersecurity experts recommend using the Play Protect scanning feature of the Google Play Store in addition to verifying the identity of the developer before downloading the app.