Threat actors use Israel-Hamas war to install spyware on Israeli Android users: Report
The HinduHackers of unknown origin and motivation were found leveraging the elevated interest in the “RedAlert”, an open-source app used by Israeli citizens to receive notifications of incoming rockets, to distribute a malicious version of the app. The app with the malicious code was found to collect sensitive user data including contacts, call logs, SMS, account information, as well as an overview of all installed apps from devices. While the iOS download button redirects users to the legitimate project’s page on the Apple App Store, the Android button directly downloads an APK file to be installed on the device. The downloaded APK file uses the legitimate code of the RedAlert app, making it difficult for users to distinguish between the real and the malicious versions.