Threat Actor Distributes Fake OpenVPN and SoftVPN Apps For Anrdoid

An advanced threat actor Bahamut that was previously involved in cyber espionage has been discovered to distribute trojanized versions of OpenVPN and SoftVPN for Android. The main goal of the campaign seems to be stealing contact and call data, device location, as well as messages from multiple apps. To hide their tracks, threat actors have launched a website that disguises itself as a legitimate app SecureVPN while distributing the app created by the attackers. Read more...