Malware
ERMAC
According to Intel471, ERMAC, an Android banking trojan enables bad actors to determine when certain apps are launched and then overwrites the screen display to steal the user's credentials
ERMAC is a Android malware family.
Background
Per Intel471, ERMAC is an Android banking trojan that lets attackers detect when specific apps are opened and then overlays the screen with a fake display in order to capture the victim's credentials.
Source: Malpedia (Fraunhofer FKIE).