Cybersecurity researchers at Cyfirma found an Android malware called SpyLend on the Google Play store. The malware, advertised as a financial tool app called Finance Simplified, offers easy loan promises and then accesses sensitive user information. The malware particularly targets Indian users and has been downloaded 100,000 times. Culprits use stolen data for blackmail and extortion, including photos.

PayPal addresses abused to send phishing emails
Hackers are exploiting the email settings of the PayPal payment platform to send phishing emails from a legitimate PayPal email address, bypassing security and spam