Zimperium Detects New Android Spyware Targeting South Korea

Security researchers reported an Android spyware campaign targeting individuals in South Korea; the malware, disguised as legitimate apps, collects and exfiltrates contacts, images, videos and SMS while using minimal code and permissions to avoid detection. Zimperium states its on-device ML classifiers (deployed eight months earlier) detected the samples in a zero-day fashion and that the campaign has been active since June 2024, underscoring the value of on-device behavioral detection.