Swiss cheesed off as postal service used to spread malware

Switzerland's NCSC warns of a targeted mail-based phishing campaign where fraudulent letters direct recipients via QR code to download a fake "AlertSwiss" Android app (hosted off Google Play) that installs a variant of the Coper trojan; Coper performs keylogging, intercepts 2FA SMS/push messages, targets banking apps to steal credentials, and supports phishing overlays and C2 control. The campaign appears limited and targeted (NCSC heard from over a dozen victims), but poses high-impact risk to affected individuals' financial accounts.