North Korean Spyware Shenanigans: KoSpy Strikes Again on Android Devices!
KoSpy, a new Android spyware, is the latest mischief from North Korea-linked APT group ScarCruft. Targeting Korean and English-speaking users, this sneaky tool poses as utility apps like File Manager and Kakao Security. By day, it’s a fake app; by night, a spyware villain collecting your secrets—bad news for your digital diary!

Hot Take:
Oh, North Korea, always keeping us on our toes with your relentless quest for global dominance—this time through an Android app! ScarCruft’s new KoSpy spyware is like the Swiss Army knife of surveillance, but for your phone. Who knew that your next “software update” could come with a free side of espionage? #ThanksScarCruft
Key Points:
- ScarCruft, linked to North Korea, is behind the new Android spyware KoSpy.
- KoSpy disguises itself as legitimate apps to target Korean and English-speaking users.
- The spyware collects SMS, calls, location, files, audio, and screenshots.
- KoSpy uses encrypted communications for stealthy operations.
- Infrastructure links to other North Korean groups, APT37 and APT43.
Already a member? Log in here