3544
Once it infects an Android device , it opens an overlay that requires users to enter their financial details whenever mobile banking apps are launched , and collected data is then saved and submitted to a command and control center owned by the attacker .
 ( phishing: requires,  users: victim, mobile banking apps: trusted entity, enter their financial details: purpose, infects an Android device: purpose) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( phishing: requires,  users: victim, mobile banking apps: trusted entity, enter their financial details: purpose, infects an Android device: purpose) 