S2W TALON blog (medium.com/s2wblog)
Scarcruft Bolsters Arsenal for targeting individual Android devices · 2023-03-23
attribution sentence: Author : BLKSMTH | S2W TALON Last Modified : Mar 23, 2023 Photo by Pathum Danthanarayana on Unsplash Executive Summary According to an analysis report published by InterLab in December 2022, a South Korean journalist received a message requesting a conversation via the Wechat messenger, and the requestor instructed the journalist to install a malicious APK file disguised as a messenger called “Fizzle.apk” — InterLab named the malicious APK "Rambl | target sentence: We observed that the Scarcruft group updated the malware's functionality or installed China-specific applications on test devices to target users with Chinese language and Chinese-manufactured mobile devices.