Android overlay banking malware families are researched in our malware lab on a daily basis. The intel gathered from real life malware samples are used to improve detection of rogue apps. In addition, the known good approach is used in detection to build a proper intel base of potential rogue apps within the CSD Dashboard of a malware analyst.