An updated version of an Android trojan called Medusa has been targeting banking users in Canada, France, Italy, Spain, Turkey, the U.K., and the U.S. It allows attackers to use overlay attacks to steal banking credentials.