The Vultur trojan steals bank credentials but asks for permissions to do far more damage down the line.
Threatpost