
A surge in cyber threats has been observed, with malicious APK files posing significant risks such as keyloggers, SD card access, spyware, and botnets. Ashish Jha, co-founder of Bluefire Redteam, emphasized the importance of downloading applications from trusted app stores and verifying the developer’s credentials. Additionally, North Korean attackers linked to the APT group Gleaming Pisces are utilizing poisoned Python packages to spread PondRAT malware, which compromises both Linux and macOS systems. The Necro Trojan has also resurfaced, infiltrating Google Play and affecting over 11 million Android devices, primarily through game mods and apps like 'Wuta Camera' and 'Max Browser', according to Securelist. McAfee researchers have identified the Lumma Stealer malware, which is distributed through fake security tests designed to manipulate users into downloading it.
