McAfee uncovered 15 SpyLoan Android apps distributed via Google Play, amassing over 8 million installs. These apps posed as legitimate loan services; however, they were designed to harvest extensive personal data which could result in extortion and financial loss for users. Hosted on a legitimate platform, they exploited user trust and cybersecurity vulnerabilities. Upon discovery, some apps were suspended, while others were updated to adhere to Google Play's policies. The incident underscores the perils of mobile apps that camouflage malicious intent with financial services, spotlighting the need for diligent app store oversight and user caution.
Source: https://securityaffairs.com/171553/cyber-crime/15-spyloan-android-apps-on-google-play.html
"id": "goo001120924",
"linkid": "google-play",
"type": "Breach",
"date": "11/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"