Saturday, June 21, 2025

New North Korean Spyware Targets Android Devices, Harvesting Personal Data

Lookout
Lookout

U.S. cybersecurity firm Lookout reported that APT37, a hacking group backed by North Korean authorities, has developed a new type of spyware. Spyware is software that installs on devices without user consent and collects and transmits sensitive information.

In a report titled “Lookout Discovers New Spyware by North Korean APT37,” Lookout’s security expert Alemdar Islamoglu revealed that hackers linked to the North Korean regime uploaded Android spyware to Google Play and the App Store, deceiving users into downloading the malicious software KoSpy. KoSpy is an Android-based malware disguised as a utility app. It offers services in both Korean and English, suggesting its targets are Korean and English-speaking individuals.

TechCrunch reported that KoSpy has been downloaded more than ten times from Google Play, indicating an active espionage campaign. It’s worth noting that North Korean hackers recently stole Ethereum worth $1.4 billion from a cryptocurrency exchange, reportedly to fund the regime’s prohibited nuclear weapons program. However, the specific motivation behind this new spyware remains unclear.

Christoph Hebeisen, Lookout’s head of security intelligence research, told TechCrunch that the limited number of downloads suggests the spyware was likely targeting specific individuals.

KoSpy can harvest sensitive data, including SMS messages, call logs, device location, files and folders, keystrokes, Wi-Fi network details, and lists of installed apps. It can also record audio, capture photos using the device’s camera, and take screenshots. Researchers discovered that KoSpy searches through Firestore, one of Google’s cloud services.

Google spokesperson Ed Fernandez said that Lookout recently shared their findings and emphasized Google’s commitment to user protection, stating, “We have removed all identified apps from Google Play.”

Hot this week

Japan’s Steel Giant Takes Over US Steel: What It Means for American Workers

Nippon Steel acquires U.S. Steel for $14.1 billion, ensuring U.S. government oversight and maintaining its headquarters in Pittsburgh.

Trump’s Ultimatum to Iran Jolts Oil Prices into Unsteady Climb

Oil prices rose slightly as markets reacted to Trump's ultimatum to Iran, with WTI and Brent crude experiencing minor gains.

Wall Street Wobbles After Powell Says No Rush on Rate Cuts

U.S. markets closed mixed after the Fed maintained interest rates, with tech stocks like Tesla and Nvidia gaining amid cautious investor sentiment.

Apple Joins Google in Map Export Request, Vows Flexible Compliance

Apple seeks South Korean approval to export high-precision map data, offering to accommodate government demands unlike Google.

Wall Street Takes a Dive as Tensions Rise Over Iran

The New York stock market fell sharply due to rising tensions in the Middle East and declines in major tech and solar stocks.

Topics

Japan’s Steel Giant Takes Over US Steel: What It Means for American Workers

Nippon Steel acquires U.S. Steel for $14.1 billion, ensuring U.S. government oversight and maintaining its headquarters in Pittsburgh.

Trump’s Ultimatum to Iran Jolts Oil Prices into Unsteady Climb

Oil prices rose slightly as markets reacted to Trump's ultimatum to Iran, with WTI and Brent crude experiencing minor gains.

Wall Street Wobbles After Powell Says No Rush on Rate Cuts

U.S. markets closed mixed after the Fed maintained interest rates, with tech stocks like Tesla and Nvidia gaining amid cautious investor sentiment.

Apple Joins Google in Map Export Request, Vows Flexible Compliance

Apple seeks South Korean approval to export high-precision map data, offering to accommodate government demands unlike Google.

Wall Street Takes a Dive as Tensions Rise Over Iran

The New York stock market fell sharply due to rising tensions in the Middle East and declines in major tech and solar stocks.

Brent and WTI Climb Following Heightened Concerns Over Iran Conflict

Oil prices surged amid rising tensions in the Middle East, with fears of disruptions to Iranian oil exports following Trump's return.

Why Stablecoins Struggle to Compete with Credit Cards in America

Stablecoins lack consumer incentives compared to credit cards, limiting adoption despite potential in specific payment areas.

Wall Street Bounces Back: Stocks Rally Amid Iran-Israel Ceasefire Hopes

US stock indices rebounded on the 16th as reports emerged of Iran seeking negotiations amidst ongoing conflicts.

Related Articles