Malware campaign masquerades as dating apps to steal data

A large-scale malware campaign using fake dating and social networking apps to steal sensitive personal data has been uncovered by mobile security researchers.

Dubbed “SarangTrap,” the operation spans both Android and iOS platforms and has leveraged more than 250 malicious apps and over 80 phishing domains to target users, particularly in South Korea.

According to a report published by Zimperium on Wednesday, the campaign employs emotionally manipulative tactics, luring victims through fake profiles, exclusive “invitation codes,” and convincing app interfaces.

Read more at Infosecurity Magazine