Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile Networks
Researchers studying cybersecurity have uncovered a new, extensive mobile malware operation that uses phony dating, social networking, cloud storage, and auto repair apps to steal private information from Android and iOS platforms.
Zimperium zLabs has codenamed the cross-platform threat SarangTrap. South Korean users seem to be the main target.
More than 80 malicious sites and more than 250 malicious Android applications were used in this massive effort, which was posed as genuine social media and dating apps, according to security expert Rajat Goyal.
Phishing websites are used to deceive users into installing these programs by mimicking genuine app store listing pages. This creates the appearance of legitimacy while allowing contact lists and photos to be exfiltrated.
The vic...