SpyLoan: A Global Threat Exploiting Social Engineering

Researchers identified a group of loan apps that share a common framework for encrypting and exfiltrating data from a victim’s device to a command and control (C2) server using a similar HTTP endpoint infrastructure.