https://www.bleepingcomputer.com/news/security/actively-exploited-strandhogg-vulnerability-affects-android-os/

A newly discovered Android vulnerability is actively exploited by malware such as the BankBot banking Trojan and it impacts all versions of the operating system up to and including Android 10.

The new vulnerability discovered by Promon security researchers was named StrandHogg and it can be exploited without the need of rooting the device.