North Korean hackers linked to a state-sponsored espionage group, APT37, have been discovered infiltrating Google’s Play Store with Android malware “KoSpy”. The malware targets Korean and English-speaking users and collects extensive data, such as location information and call logs from compromised devices. With a two-stage command and control infrastructure, it is designed to maintain persistence for extended periods. The malicious apps have since been removed from the Play Store.

Healthcare organizations need to shake up email security practices
A study by Paubox has revealed that 43% of all healthcare email breaches come from Microsoft 365 due to security misconfigurations. The report found that