India, Oct. 29 -- It starts like any other app you come across, with a nice icon, a bunch of decent reviews, and a paraphrased claim about tidying up your phone or making it run a bit better. Click install and move on. A week or two later, without so much as a whisper, some bloke halfwayround the world has got a gaze on your screen, is copying your passwords & raiding your digital wallet. That's the quiet nightmare of Herodotus, a new Android Trojan the cybersecurity experts reckon could be a whole new ball game when it comes to mobile threats.

Most Android malware shows its nasty face the minute it's installed on your phone. Herodotus, though, plays it cool. It doesn't show off. It insinuates itself onto the phone, usually through what ...