New Android Spyware Steals Data from Gamers and TikTok Users

SentinelLabs uncovered four new CapraRAT Android APKs linked to the Pakistan-aligned Transparent Tribe (APT36) that are disguised as popular apps (Crazy Games, S*xy Videos, Weapons, and TikTok). The spyware either requests extensive, high-risk permissions to exfiltrate sensitive data or uses WebView to maintain compatibility while delivering malicious content; the campaign targets users who sideload apps from untrusted sources and signals a shift in the group's targeting beyond Indian government and military personnel. Users are advised to prefer official app stores, scrutinize permissions, read independent reviews, and run reputable mobile security solutions.