The Dark Side of Romance: SarangTrap Extortion Campaign

Zimperium zLabs uncovered the SarangTrap campaign: a large, coordinated cross-platform operation that used 250+ malicious Android apps, ~80+ phishing domains (many indexed by Google), and deceptive iOS configuration profiles to trick users into granting permissions and exfiltrate contacts, images, device identifiers and sometimes SMS; attackers used emotional social engineering for extortion and continue to evolve evasion techniques.