Google Play

Over 8 million users had installed 15 SpyLoan Android apps from Google Play which targeted users primarily in South America, Southeast Asia, and Africa. The apps, which were designed to look like legitimate loan-offering financial applications, executed a scam by exploiting social engineering tactics to collect excessive permissions and sensitive user data. This resulted in various consequences including extortion, harassment, and financial losses for the victims. Users were deceived through misleading advertisements, and their personal data was compromised as a result of granting these applications access beyond what a loan app would typically require.

Source: https://securityaffairs.com/171553/cyber-crime/15-spyloan-android-apps-on-google-play.html

"id": "goo000120724",
"linkid": "google-play",
"type": "Cyber Attack",
"date": "11/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"