The so-called "Godfather" malware targeting Android phones can generate fake login screens that appear on top of legitimate banking and crypto exchange apps, stealing victims' passwords. https://www.pcmag.com/news/android-malware-godfather-targets-users-of-400-banks-crypto-exchanges
Android Malware 'Godfather' Targets Users of 400 Banks, Crypto Exchanges

The malware generates fake login screens that appear on top of legitimate banking and crypto exchange apps' login forms, stealing victims' passwords.

PCMag