More Android apps riddled with malware spotted on Google Play

ESET researchers discovered VajraSpy, an Android espionage RAT embedded in 12 fake messaging/news apps (six distributed via Google Play and others on third-party stores). The modular malware can exfiltrate contacts, SMS, call logs, files, intercept encrypted messaging apps, record calls, and control the camera; telemetry points to victims primarily in Pakistan and India, and the campaign is attributed to the Patchwork APT. Although the Play-hosted apps were removed, copies remain on third-party stores, increasing ongoing risk to targeted users.