North Korean Spyware Shenanigans: KoSpy Strikes Again on Android Devices!

KoSpy, a new Android spyware, is the latest mischief from North Korea-linked APT group ScarCruft. Targeting Korean and English-speaking users, this sneaky tool poses as utility apps like File Manager and Kakao Security. By day, it’s a fake app; by night, a spyware villain collecting your secrets—bad news for your digital diary!

Pro Dashboard

Hot Take:

Oh, North Korea, always keeping us on our toes with your relentless quest for global dominance—this time through an Android app! ScarCruft’s new KoSpy spyware is like the Swiss Army knife of surveillance, but for your phone. Who knew that your next “software update” could come with a free side of espionage? #ThanksScarCruft

Key Points:

  • ScarCruft, linked to North Korea, is behind the new Android spyware KoSpy.
  • KoSpy disguises itself as legitimate apps to target Korean and English-speaking users.
  • The spyware collects SMS, calls, location, files, audio, and screenshots.
  • KoSpy uses encrypted communications for stealthy operations.
  • Infrastructure links to other North Korean groups, APT37 and APT43.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?