Cybersecurity firm Lookout found several samples of a North Korean spyware it calls KoSpy. © 2024 TechCrunch. All rights reserved. For personal use only.
North Korean government hackers deployed Android spyware, KoSpy, on the Google Play Store and APKPure, successfully tricking some users into downloading it. Lookout, a cybersecurity firm, identified the campaign and attributes it to North Korea. KoSpy collects sensitive information like SMS, call logs, location data, files, keystrokes, Wi-Fi details, and app lists. Google removed the identified apps and deactivated Firebase projects after Lookout's report. The spyware likely targeted specific individuals, potentially in South Korea, who speak English or Korean, based on app names, language support, and associated domain names previously linked to North Korean hacking groups.
