Identity, assumed
Device-native biometrics have been treated as proof of identity, but identity was only ever assumed: a PIN unlocks the phone just as well. Banking trojans now exploit that gap remotely. Zimperium has documented one targeting 349 banking, financial, e-wallet and cryptocurrency apps.