Uncovered by researchers at Symantec, the malware displays a spoofed version of the Uber app, encouraging the user to enter their user ID in the form of their registered phone number and password. ... The malware users a fake Uber overlay to steal user credentials.