Not for the first time: North Korean hackers used fake apps to spread spyware on Android
Lookout Threat Lab researchers discovered the spyware, dubbed KoSpy, attributing it with medium confidence to North Korean APT group ScarCruft, also known as APT37.
