Predatory app downloaded 100,000 times from Google Play Store steals data, uses it for blackmail

A malicious Android app named “Finance Simplified,” part of the SpyLoan family, was available on Google Play and downloaded roughly 100,000 times; it evaded store detection by loading a WebView that redirected users to an external Amazon EC2-hosted installer. Once installed, the app harvests sensitive data (contacts, call logs, SMS, photos, location) for potential blackmail or resale, targeted Indian users, and although removed from Play Store, may remain active on infected devices.