All Android users warned to delete app right now – it steals your banking login

ANDROID phone owners are being warned over a dangerous app that steals your banking login.

You need to check your phone immediately to make sure it's not installed, cyber-experts say.

The app is called Todo: Day Manager, and has been slammed by security specialists.

It installs a banking trojan malware called Xenomorph, according to researchers at .

This can hijack your login info from banking apps, and can even read your SMS messages.

That allows the app to intercept your two-factor verification codes (typically delivered over text) to raid your logins – and bank account.

"This is the latest in a disturbing string of hidden malware in the Google Play store," the cyber-experts warned.

Worse still, the Android app makes itself intentionally difficult to delete.

You need to search your phone for it immediately and uninstall it, cyber-experts say.

"Our analysis found that the Xenomorph banking malware is dropped from GitHub as a fake Google Service application upon installation of the app," said the Zscaler cyber-experts.

"It starts with asking users to enable access permission.

"Once provided, it adds itself as a device admin and prevents users from disabling Device Admin, making it uninstallable from the phone."

If you haven't given permissions to the app then you should be able to uninstall it safely.