Hackers target Taiwan with malware delivered via fake messaging apps

Researchers uncovered a nearly two-year targeted campaign in Taiwan distributing PJobRAT via fake chat apps (SangaalLite and CChat) hosted on WordPress sites; the Android RAT can steal SMS, contacts, device data and documents, offers broad remote control, and was likely focused on specific victims. The campaign appears limited in scale and currently paused, but demonstrates threat actors retooling malware and distribution methods for targeted espionage.