"Ricochet Chollima Using KoSpy Android Spyware" published by PolySwarm. #KoSpy, #RichochetChollima, #DPRK, #CTI https://blog.polyswarm.io/ricochet-chollima-using-kospy-android-spyware
Ricochet Chollima Using KoSpy Android Spyware

KoSpy is a sophisticated Android spyware linked to North Korean threat actor Ricochet Chollima, targeting Korean and English-speaking users.

KoSpy: Smartphones mit Spyware aus Nordkorea infiziert - TECHBOOK
https://www.techbook.de/mobile-lifestyle/apps/kospy-nordkorea-spyware #Malware #Spyware #KoSpy
Zahlreiche Smartphones mit Spyware aus Nordkorea infiziert

Eine nordkoreanische Hacker-Gruppe hat zahlreiche Smartphones mit der extrem gefährlichen Spyware „KoSpy“ infizieren können.

TECHBOOK

North Korean government hackers snuck spyware onto the official Android app store, and tricked a few people to download it, according to #Lookout.

The spyware, dubbed #KoSpy, appears to be part of a highly targeted #espionage operation.

This is a good reminder that #DPRK hackers are not just after crypto, but are also going after people to #spy on them.

🔗 http://techcrunch.com/2025/03/12/north-korean-government-hackers-snuck-spyware-on-android-app-store/

North Korean government hackers snuck spyware on Android app store | TechCrunch

Cybersecurity firm Lookout found several samples of a North Korean spyware it calls KoSpy.

TechCrunch
North Korea-linked APT group ScarCruft spotted using new Android spyware KoSpy

North Korea-linked APT group ScarCruft used a new Android spyware dubbed KoSpy to target Korean and English-speaking users.

Security Affairs
Allarme KoSpy: spyware Android avanzato sul Play Store

KoSpy: spyware Android legato alla Corea del Nord scoperto e rimosso da Google Play Store. Ruba SMS, chiamate, posizione, foto, audio e altro. Come proteggersi.

CeoTech

📱 TECH / CYBERSECURITY
🔴 North Korean Spyware Found in Google Play

🔸 Malware disguised as apps like "Phone Manager" & "Smart Manager."
🔸 Collected user data for North Korean intelligence.
🔸 Found in Google Play & Apkpure.

#Android #GooglePlay #CyberSecurity #NorthKorea #KoSpy

A new Android spyware named 'KoSpy' is linked to North Korean threat actors who have infiltrated Google Play and third-party app store APKPure through at least five malicious apps. #KoSpy #spyware #CyberAlerts https://www.bleepingcomputer.com/news/security/new-north-korean-android-spyware-slips-onto-google-play/
New North Korean Android spyware slips onto Google Play

A new Android spyware named 'KoSpy' is linked to North Korean threat actors who have infiltrated Google Play and third-party app store APKPure through at least five malicious apps.

BleepingComputer
KoSpy: Unmasking the North Korean Spyware Threat

Discover KoSpy, a North Korean spyware infiltrating Android devices via Google Play, posing significant cybersecurity threats.

The DefendOps Diaries
Lookout Discovers North Korean APT37 Mobile Spyware | Threat Intel

Lookout researchers have discovered a novel Android surveillance tool dubber KoSpy. It is attributed to APT 37 aka ScarCruft.

Lookout Discovers North Korean APT37 Mobile Spyware | Threat Intel

Lookout researchers have discovered a novel Android surveillance tool dubber KoSpy. It is attributed to APT 37 aka ScarCruft.