Android malware Tanzeem, linked to the threat actor DoNot Team, believed to be Indian, extracted personal data via fake apps. Two such apps, Tanzeem and Tanzeem Update, requested unnecessary access permissions, and used the OneSignal platform to send phishing links embedded in notifications. The malware collected sensitive data including texts, contacts, call logs, location and account info to track victims. It’s suspected the malware targeted specific individuals.

M&S issues update as crippling nationwide IT outage still ongoing – The Sun
Marks & Spencer (M&S) halted online orders in the UK and Ireland following a cyber attack, leading to a 5% drop in share price. Physical