Malicious Android Loan Apps Steal Users Personal & Financial Data

Several Android loan apps, dubbed “SpyLoan” apps, have been found to maliciously collect personal and financial information from users in Southeast Asia, Africa, and Latin America. The apps, originally available on Google Play, were then used to extort money. These apps were distributed through social media, scam websites, and SMS messages. All have similar behavioral patterns and functions. The operators mainly originated from countries like Mexico, Indonesia, Thailand, Vietnam, India, Pakistan, Colombia, Peru, Ecuador, Egypt, Kenya, and Singapore. A report contains more detailed information about these malicious apps.