Spyware in bogus Android apps is attributed to North Korean group (Suzanne Smalley, The Record)

North Korean state-backed hackers infected Android devices with malware intended to spy on Korean and English speakers, researchers said Wednesday. Mobile and cloud security firm Lookout labeled the malware KoSpy and said it appears to be the worth of an advanced persistent threat group tracked as ScarCruft or APT37. KoSpy, which the company spotted on the Google Play Store and third-party app stores, is able to gather significant amounts of sensitive data, including call logs, text messages, files, audio, screenshots and user location, according to the report.

Spyware in bogus Android apps is attributed to North Korean group | The Record from Recorded Future News