Cybersecurity researchers have uncovered a scheme involving fraudulent websites hosted on new domains that deliver a notorious Android malware, SpyNote. The illegitimate sites imitate Google Play Store pages to trick users into downloading the malware. This technique is attributed to a threat actor known as GoldFactory, and the malware, which can extract sensitive data, has been adopted by state-sponsored hacking groups. Research also suggests similar tactics are used to target the Uyghur, Taiwanese, and Tibetan communities.
If you have these apps on your smartphone, delete them right away, they contain malware.
Cybersecurity researchers have identified a sophisticated spyware called KoSpy that hides within popular Android applications. Capable of hiding in utility applications, the malware tracks location,
