The TrickMo banking Trojan has compromised approximately 13,000 Android devices, evolving its capabilities to steal device unlock patterns and PINs. Initially reported by cybersecurity experts, the malware now mimics the lock screen to capture sensitive information. TrickMo targets a range of applications, including banking, corporate VPNs, social media, and healthcare, exposing thousands of stolen credentials. This development highlights the ongoing threat posed by cybercriminals who employ personalized text messages to lure users into fake login pages, thereby compromising their credentials and data rapidly.