Russian military personnel are being targeted by newly uncovered Android spyware designed to steal contacts and track locations.
This malware is embedded within a tampered version of the Alpine Quest mapping application, commonly used by hunters, athletes, and Russian military members deployed in the Ukrainian war zone. The app offers topographical maps for both online and offline use. This compromised version is distributed through a specific Telegram channel and various unofficial Android app repositories. The lure of this version is that it claims to offer the Alpine Quest Pro for free, which is typically a paid feature.
The spyware, identified as Android.Spy.1292.origin, is discussed in detail by researchers from the Russian security firm Dr.Web in their blog post.
(Source: Ars Technica)
