The Tanzeem app update triggers a fake chat page that can dupe users into granting invasive permissions. The app seeks permissions to access contact, call log, location, account information, and conduct external storage file exfiltration activities, according to an analysis by Cyfirma.

North Korean Hackers Use Fake U.S. Companies to Spread Malware in Crypto Industry: Report
North Korean hackers reportedly set up shell companies in the US to penetrate the crypto sector and target developers via fake job offers, according to