Sophisticated Android Spyware Attack Spreads via Google Play

kltaylorkltaylor Moderator, Beta Tester Posts: 1,231
1000 Comments 500 Likes 50 Answers 100 Awesomes

A sophisticated, ongoing espionage campaign aimed at Android users in Asia is likely the work of the OceanLotus advanced persistent threat (APT) actor, researchers said this week.

Dubbed PhantomLance by Kaspersky, the campaign is centered around a complex spyware that’s distributed via dozens of apps within the Google Play official market, as well as other outlets like the third-party marketplace known as APKpure.

The effort, though first spotted last year, stretches back to at least 2016, according to findings released at the [email protected] virtual security conference on Tuesday.

A Sophisticated Campaign

The spyware is fairly narrow in its focus when it comes to functionality, researchers said. It can gather geolocation data, call logs and contacts, and can monitor SMS activity; the malware can also gather a list of installed applications, as well as device information, such as the model and OS version.

To read the entire article, please click on the Source link above.

"There's a fine line between audacity and idiocy."
-Warden Anastasia Luccio, Captain


  • RobinRobin Administrator, Fing Team Posts: 3,706
    250 Answers 2500 Comments 500 Likes 100 Awesomes
    A very helpful article @kltaylor I was searching on the community for some information and this post was the first result. Kudos

    Robin (Admin at Fing)
    Getting Started? Please refer to Community guidelines & Community User Guides("Helping Hand"). HAPPY POSTING!!!
Sign In or Register to comment.