The North Korea-linked APT37 has been observed targeting Android users with spyware distributed via Google Play.

A new Android spyware named 'KoSpy' is linked to North Korean threat actors who have infiltrated Google Play and third-party app store APKPure through at least five malicious apps.

Newly discovered spyware, possibly from a North Korean hacking group, was found circulating on the Google Play Store. The spyware programs, dubbed "KoSpy," were masquerading as utility apps.

Researchers have discovered multiple Android apps, some that were available in Google Play after passing the company’s security vetting, that surreptitiously uploaded sensitive user information to ...

KoSpy masqueraded as utility apps, according to Lookout Mobile Security, which links the activity to a cyber-espionage ...