A Trojan virus in China is striking mobile phone users by intercepting inbound messages and lifting sensitive financial data, according to a story by Want China Times. In particular the malware is impacting third-party payment accounts.

The virus inserts itself between the sender and recipient of a message that contains banking codes, copies them and deletes the data, and forwards the denuded message to the intended receiver.

First detected in April, the virus has hit more than 500 phones—all running Android software—with a surge of activity occurring in recent days.