Spyware presence in enterprise networks

Zscaler ThreatlabZ analyzed NeoSpy and related Android spyware variants that masquerade as parental-control/anti-theft apps, exfiltrate SMS, calls, keystrokes, GPS and photos to attacker-controlled servers (initial registration and some exfiltration occur in plaintext), hide their icon after setup, and are managed via attacker dashboards; a Google Play variant with 10k–50k installs was removed after disclosure.