Malicious APKs Drain Bank Accounts

Palo Alto Networks Unit 42 reports a targeted phishing campaign in which threat actors pose as law enforcement to convince Chinese users to install malicious Android APKs. The apps block incoming messages and calls to prevent fraud alerts, present fake legal case documents to build trust, and prompt victims to select their bank and enter sensitive personal and payment-card information; attackers then use this data and next-stage payloads to drain bank accounts.