Android, North Korea and spyware

North Korea's ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps
ScarCruft, also called APT27 and Reaper, is a North Korean state-sponsored cyber espionage group active since 2012. Attack chains orchestrated by the group primarily leverage RokRAT as a means to harvest sensitive data from Windows systems. RokRAT has since been adapted to target macOS and Android.
North Korean government hackers snuck spyware on Android app store
A group of hackers with links to the North Korean regime uploaded Android spyware onto the Google Play app store and were able to trick some people into downloading it, according to cybersecurity firm Lookout.
Watch out for North Korean spyware apps on the Google Play store
Security researchers have shared a warning about five Android apps which contain spyware from a state-backed North Korean hacking group.The Latest Tech News, Delivered to Your Inbox
Hackers from North Korea deploy spyware through Google Play
Cybersecurity researchers at Lookout have discovered KoSpy, a sophisticated Android spyware linked to North Korea that has managed to infiltrate the Google Play Store. The malware is attributed to ScarCruft (APT37),
At least 5 North Korean spy apps have been found on Google Play — what you need to know
All of those collection methods could capture some incredibly delicate personal details, only for it to be sent to servers controlled by North Korean intelligence workers. Lookout
Android TV Users Beware: Vo1d Malware Botnet Now Controls 1.6M Devices
A massive malware botnet is turning Android TVs into cybercriminal proxies. Discover how Vo1d operates, its hidden dangers, ...
BadBox malware hit after infecting over 500,000 Android devices
Security researchers HUMAN and partners disrupt BadBox 2.0 botnet They removed dozens of malicious apps from the Play Store, ...
New North Korean Android spyware slips onto Google Play
A new Android spyware named 'KoSpy' is linked to North Korean threat actors who have infiltrated Google Play and third-party ...
Dangerous malware targets you through fake loan app
Tech expert Kurt “CyberGuy" Knutsson says a malware app called SpyLend is posing as a financial tool, hitting 100,000-plus ...
1 Million Android Consumer Backdoors Confirmed—What You Need To Know
At least 1 million Android devices have been compromised by a backdoor installing bot, including tablets, streaming boxes and ...
BadBox malware disrupted on 500K infected Android devices
The BadBox Android malware botnet has been disrupted again by removing 24 malicious apps from Google Play and sinkholing ...
Malware compromised bank data from 26 million devices
A recent Kaspersky security report has revealed that infostealer malware might have compromised the bank data on 26 million devices.
Millions of Android TVs hijacked in massive botnet — how to see if yours is at risk
The botnet, which has been compromising devices via an unknown vector, has apparently been recruiting new Android TV boxes as ...
1 Million Third-Party Android Devices Have a Secret Backdoor for Scammers
New research shows at least a million inexpensive Android devices—from TV streaming boxes to car infotainment systems—are ...
CSO Online7d
Badbox Android botnet disrupted through coordinated threat hunting
Human Security, in collaboration with Google, Shadowserver and others, has sinkholed C2 operations affecting 500,000 infected ...
Cybercriminals are cloning DeepSeek AI website to ship malware
DeepSeek AI clones, the new way for attackers to install malware on your PC. According to Kaspersky researchers, the ...