Not content with stealing your financial details, personal information, and login credentials, there’s now an Android banking Trojan that also asks victims to take a selfie with their ID cards.

McAfee Labs’ Mobile Research Team discovered the malicious application, which is a new variant of the Acecard Trojan Malware (aka Torec) that was first identified back in February. In addition to asking for credit card details and information such as “mother’s maiden name,” the updated app offers “identify confirmation,” which involves uploading photos of identity documents such as a driver’s license along with a selfie of the gullible user holding the ID.