Cybersecurity firm Cyfirma has detected FireScam, an Android info-stealing malware with spyware capabilities. The malware monitors Android app notifications for credentials and financial data, which it sends to a Firebase database. FireScam is distributed via a fake ‘Telegram Premium’ APK from a phishing website using the GitHub.io domain and mimics the Russian RuStore app store. The malware employs advanced evasion techniques and exfiltrates data to remote servers, increasing its potential impact on user privacy and security.
North Korean Hackers Use Fake U.S. Companies to Spread Malware in Crypto Industry: Report
North Korean hackers reportedly set up shell companies in the US to penetrate the crypto sector and target developers via fake job offers, according to
