Summary: Researchers have identified multiple Android apps that, despite passing Google Play’s security checks, are secretly uploading sensitive user data to North Korean intelligence. These apps, which appear as utility tools, collect various personal information including SMS messages, call logs, and location data. The detected malware, named KoSpy, highlights the risk of installing seemingly legitimate applications from app marketplaces.
Affected: Android users, particularly those using the affected apps
Keypoints :
- Multiple malicious Android apps discovered that send user data to North Korean spies.
- Apps masquerade as legitimate utility applications such as Phone Manager and File Manager.
- Available on Google Play and Apkpure, raising concerns over app vetting processes.
- Personal data collected includes SMS, call logs, and location information.
- Developer’s privacy policy raises security concerns, indicating risks in data transmission.