Banking Trojan, Gugi, evolves to bypass Android 6 protectionWe have found a new modification of the mobile banking Trojan, Trojan-Banker.AndroidOS.Gugi.c that can bypass two new security features added in Android 6: permission-based app overlays and a dynamic permission requirement for dangerous in-app activities such as SMS or calls. The modification does not use any vulnerabilities, just social engineering.
Source:
Banking Trojan, Gugi, evolves to bypass Android 6 protection