Malicious Android Apps Target Pakistani Individuals in Espionage Campaign.
A new targeted campaign has been discovered that involves two rogue Android apps available on the Google Play Store, which are being used to extract contact and location data from unsuspecting victims in Pakistan. The campaign has been attributed to a threat actor known as DoNot Team, which is suspected to have an India-nexus. The apps are being used as part of a highly targeted operation, and users are being approached via messages on Telegram and WhatsApp to lure them into installing the apps. The apps are configured to trick victims into granting invasive permissions to access their contact lists and precise locations, allowing the threat actor to strategize future attacks and employ Android malware with advanced features to target and exploit the victims.