North Korean Spyware Strikes Again: KoSpy Sneaks into Google Play – How to Stay Safe!
KoSpy, Android spyware linked to North Korean threat actors, infiltrated Google Play with apps masquerading as file managers and security tools. While promising functionality, they sneakily load KoSpy in the background. Users must manually uninstall these apps and enable Google Play Protect to safeguard against this digital espionage.
Hot Take:
***If North Korea’s APT37 keeps dabbling in spyware, maybe they should consider a career in app development instead. After all, who knew they were such pros at creating apps that do everything except what they advertise? You have to wonder if their next move involves releasing an app called “Totally Not Spyware.”***
Key Points:
– KoSpy, a new Android spyware, linked to North Korean threat group APT37, infiltrated Google Play and APKPure.
– The campaign targets Korean and English-speaking users since March 2022.
– Apps mimic file managers, security tools, and software updaters but secretly install spyware.
– KoSpy can intercept SMS, track GPS, and use device’s camera/microphone for surveillance.
– Google removed the malicious apps and corresponding Firebase projects, advising users to uninstall and scan devices.